interview-to-openspec

Pass

Audited by Gen Agent Trust Hub on Oct 6, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the openspec CLI for generating and validating specifications. It also executes a local Python script, scripts/audit_plan_claims.py, to verify that commands and file paths mentioned in the plan are valid. It is instructed to ask the user before installing the CLI or initializing a project with new tools.\n- [COMMAND_EXECUTION]: The scripts/audit_plan_claims.py script invokes subprocess.run(['just', '--summary']) to retrieve a list of available recipes from the repository's justfile. This call is executed without a shell, uses a fixed argument list, and checks for the tool's existence via shutil.which before invocation, making it a safe operational check.\n- [COMMAND_EXECUTION]: The skill uses tools like git log and the openspec CLI to gather repository information (context, rules, specs) before proposing changes. These are standard operations for the skill's purpose of drafting technical specifications.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 6, 2026, 11:19 PM