The Agent Skills Directory

Command Execution: The skill performs shell operations using npx openspec to manage and verify change requests. This allows the agent to interact with developer tools via the command line.
External Package Execution: The skill invokes npx openspec without a specific version, which leads to the execution of the latest package version from the public registry. This is a common practice for CLI tools but warrants awareness regarding version control.
Indirect Prompt Injection Surface: The skill analyzes content from local project artifacts, presenting a surface for indirect instructions.
Ingestion points: The agent reads requirements and tasks from tasks.md, design.md, and specification files.
Boundary markers: No explicit delimiters or instructions are provided to the agent to distinguish between data and potentially embedded instructions within these files.
Capability inventory: The agent can execute shell commands and search the project filesystem.
Sanitization: The skill does not describe any specific sanitization or filtering of the artifact content before it influences the verification logic.

openspec-verify-change