openspec-archive

Pass

Audited by Gen Agent Trust Hub on Aug 14, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill invokes several CLI tools to perform project management tasks. It uses openspec for workflow status and change listing, git for commit history, and gh (GitHub CLI) for creating pull requests. These operations are restricted to the local repository and the user's authenticated GitHub environment.
  • [DATA_EXFILTRATION]: The skill reads local files such as proposal.md, design.md, and tasks.md to extract information for documentation purposes. This data is used to generate a pull request via the official GitHub CLI, which is a well-known and trusted service for development workflows.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 14, 2026, 05:52 PM
Security Audit — agent-trust-hub — openspec-archive