openspec-sync-specs
Pass
Audited by Gen Agent Trust Hub on Mar 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
openspecCLI tool with thelist --jsonargument to retrieve and display available change sets for user selection. - [PROMPT_INJECTION]: This skill presents an indirect prompt injection surface as it reads and interprets requirements from markdown files to modify other files. * Ingestion points: Reads delta specification files from
openspec/changes/<name>/specs/*/spec.mdand main specifications fromopenspec/specs/<capability>/spec.md. * Boundary markers: Absent; the agent is instructed to read the raw markdown content to understand and apply 'intelligent merging' based on headers and list structures. * Capability inventory: The agent has the capability to read and write files within the project directory and execute the localopenspecCLI. * Sanitization: No explicit sanitization or filtering is performed on the content of the specification files before the agent processes and interprets the instructions contained within.
Audit Metadata