openspec-plus-apply
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSNO_CODE
Full Analysis
- [COMMAND_EXECUTION]: The skill discovers and executes project-specific build, lint, and test commands (e.g.,
npm test,cargo build). These are executed locally to verify code quality and are scoped to the project environment. - [EXTERNAL_DOWNLOADS]: The skill uses the
skilltool to dynamically load theopenspec-plus-tdddependency. This is a local skill reference used for enforcing TDD discipline within the workflow. - [NO_CODE]: The skill consists entirely of markdown instructions and prompt templates. It does not include standalone scripts or binary executables, relying instead on the host agent's native tools and subagent capabilities.
Audit Metadata