openspec-explore
Pass
Audited by Gen Agent Trust Hub on Jul 12, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
openspec list --jsonto retrieve project context at the start of a session. This is a legitimate use of the tool specified in the metadata and does not involve user-controlled input interpolation into the shell.
Audit Metadata