openspec-explore
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill has an indirect prompt injection surface as it reads external project files to inform its thinking process.
- Ingestion points: Processes
openspec/config.yamland existing artifacts found in the project directory. - Boundary markers: Instructs the agent to treat these files as constraints rather than content to be copied.
- Capability inventory: Limited to Bash operations via the
openspecCLI for managing change proposals and specifications. - Sanitization: No specific filtering is applied to the ingested documentation content.
Audit Metadata