openspec-explore
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes the 'openspec' command-line utility to list active changes and gather context.
- Evidence: Execution of
openspec list --jsonwithinSKILL.md. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from local project files and the codebase, representing a potential surface for indirect instructions.
- Ingestion points: Reads markdown artifacts in
openspec/changes/and general source code files as directed inSKILL.md. - Boundary markers: None present; the skill lacks specific delimiters to separate user data from instructions.
- Capability inventory: Shell command execution via the
openspecCLI and file write access for specific design and specification documents. - Sanitization: No validation or sanitization of input file content is performed.
Audit Metadata