openspec-propose
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes multiple local shell commands using the
openspecCLI (e.g.,openspec new,openspec status,openspec instructions) to manage project state and retrieve metadata. These commands are integral to the skill's stated purpose of automating document generation. - [PROMPT_INJECTION]: The skill contains an indirect prompt injection surface because it processes and follows instructions provided by external CLI tool outputs at runtime.
- Ingestion points: Step 4a in
SKILL.mdinvolves reading JSON formatted instructions, rules, and context from theopenspec instructionscommand. - Boundary markers: Explicit delimiter boundaries are absent; however, the skill provides logical separation by instructing the agent to use the data as constraints rather than directly copying it into the generated files.
- Capability inventory: The skill has the capability to execute subprocesses via the
openspecCLI, write files to the local filesystem, and query the user for input using theAskUserQuestiontool. - Sanitization: No specific sanitization or validation of the ingested JSON data is performed before it is used to influence the agent's content generation.
Audit Metadata