openspec-verify-change
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
openspecCLI to manage and verify changes. Specifically, it runsopenspec listto retrieve changes,openspec statusto check workflow schemas, andopenspec instructions applyto load implementation artifacts. These commands are integral to the skill's primary function and are performed using a vendor-specific tool. - [INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it processes untrusted external data.
- Ingestion points: Reads content from
tasks.md,design.md, and specification files located in theopenspec/changes/<name>/specs/directory. - Boundary markers: None identified; the skill directly parses markdown content for requirements, scenarios, and checkboxes.
- Capability inventory: Limited to command execution via the
openspecCLI and reporting findings to the user. It does not perform network operations or file writes. - Sanitization: None identified; the skill assumes the provided specification artifacts are authoritative for the verification report.
Audit Metadata