openspec-apply-change
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the openspec CLI to perform operations such as listing changes, checking status, and fetching implementation instructions. These commands are part of the core functionality for managing the development workflow.
- [PROMPT_INJECTION]: The skill processes content from project artifacts such as specifications and designs to guide implementation. This establishes a surface for indirect prompt injection if project files are malicious.
- Ingestion points: Project files listed in the contextFiles array retrieved from the CLI output (SKILL.md Step 4).
- Boundary markers: Absent; the skill does not use specific delimiters or instructions to ignore potential commands within artifacts.
- Capability inventory: File system read/write access and the ability to execute openspec CLI commands.
- Sanitization: Artifact content is incorporated into the implementation process without explicit validation or escaping.
Audit Metadata