openspec-explore

Pass

Audited by Gen Agent Trust Hub on Oct 12, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the openspec list --json command to retrieve the current state of project changes. This is a local, read-only operation necessary for the skill's core functionality.- [INDIRECT_PROMPT_INJECTION]: The skill is designed to read and analyze local project artifacts, which introduces a surface for indirect prompt injection.
  • Ingestion points: Reads markdown files from openspec/changes/ and specs/ directories.
  • Boundary markers: The instructions do not define specific delimiters for parsed file content.
  • Capability inventory: The agent is permitted to read codebase files, list changes via CLI, and write documentation artifacts (proposals, designs, specs).
  • Sanitization: There is no explicit requirement to sanitize or validate the content of the documentation files before processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 12, 2026, 08:39 AM