openspec-propose
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill interacts with the local environment using the
openspecCLI via a restricted Bash tool scope (openspec:*). It uses these commands to manage the lifecycle of project proposals, check status, and retrieve artifact templates. - [DYNAMIC_EXECUTION]: The workflow allows for artifact creation to be delegated to specific sub-commands or skills if specified by the
openspec instructionscommand. This is a core functional feature of the OpenSpec architecture for generating complex artifacts. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data in the form of JSON instructions and templates returned by the
openspecCLI and reads artifact files from the filesystem. - Ingestion points: Data enters the context via
openspec status --jsonandopenspec instructions --json(SKILL.md). - Boundary markers: The skill does not explicitly define delimiters for CLI-provided instructions.
- Capability inventory: The skill has capabilities to write files to disk and execute
openspecCLI commands. - Sanitization: There is no explicit sanitization step for the instructions returned by the CLI, though the skill instructions emphasize that metadata like
contextandrulesare for the agent's guidance and should not be copied into output files.
Audit Metadata