openspec-explore
Pass
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands to interact with the local
openspecCLI tool. It executesopenspec list --jsonto retrieve the current state of project changes andopenspec status --change "<name>" --jsonto obtain details about specific artifacts. - [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it is instructed to read and process the contents of codebase files and OpenSpec artifacts provided by the CLI tool's output.
- Ingestion points: Local files identified by the
artifactPathsin the status JSON and general codebase content. - Boundary markers: None specified; the skill lacks explicit instructions to treat file content as untrusted or to use delimiters.
- Capability inventory: The skill can execute local
openspeccommands and read files. It is explicitly restricted from performing write operations or code implementation. - Sanitization: No validation or sanitization of the ingested file content is mentioned.
Audit Metadata