ss-list-changes
Pass
Audited by Gen Agent Trust Hub on Jul 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill is constrained to read-only operations on a specific directory structure.- [PROMPT_INJECTION]: The skill processes external file content, creating a surface for indirect prompt injection. However, the risk is negligible as it only generates a summary table and lacks execution capabilities.
- Ingestion points: SKILL.md (targeting openspec/changes/ and openspec/specs/ files).
- Boundary markers: Absent.
- Capability inventory: Read-only filesystem access.
- Sanitization: Absent.- [DATA_EXFILTRATION]: No network tools or external data transfer mechanisms are utilized.- [REMOTE_CODE_EXECUTION]: No remote code download, script execution, or package dependencies are present.
Audit Metadata