openspec-archive
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes several CLI tools to perform project management tasks. It uses
openspecfor workflow status and change listing,gitfor commit history, andgh(GitHub CLI) for creating pull requests. These operations are restricted to the local repository and the user's authenticated GitHub environment. - [DATA_EXFILTRATION]: The skill reads local files such as
proposal.md,design.md, andtasks.mdto extract information for documentation purposes. This data is used to generate a pull request via the official GitHub CLI, which is a well-known and trusted service for development workflows.
Audit Metadata