openspec-verify-change
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
openspecCLI tool to interact with project stores, list changes, and retrieve instructions. This tool usage is essential to the skill's primary function of verifying software changes. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data from the local repository, creating a surface for indirect prompt injection.
- Ingestion points: The skill reads local files such as
tasks.md,specs.md,design.md, and the project's source code to extract requirements and scenarios. - Boundary markers: There are no explicit delimiters or instructions to ignore potential commands embedded within the artifacts being parsed (e.g., within requirement descriptions or design decisions).
- Capability inventory: The skill possesses the capability to execute shell commands via the
openspecCLI and read arbitrary files within the project context. - Sanitization: The instructions do not specify any sanitization or filtering logic for the content extracted from the documentation before it is processed by the agent to guide the verification logic.
Audit Metadata