openspec-explore
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external project files, which constitutes a vulnerability surface for indirect prompt injection.
- Ingestion points: The agent reads openspec/config.yaml and existing artifact files (specs, designs, tasks) from the change root.
- Boundary markers: The skill does not implement delimiters or explicit instructions to ignore embedded commands when processing external data.
- Capability inventory: The skill is permitted to use the openspec CLI tool via Bash but is strictly forbidden from writing application code.
- Sanitization: No sanitization or validation is applied to the content read from external files before it is used as agent context.
Audit Metadata