openspec-proposal-creation

Warn

Audited by Runlayer on Feb 21, 2026

Risk Level: MEDIUM
Scan Summary
Max Score
78%
Files
6
Flagged
6
Chunks
8
Flagged Files (6)
SKILL.mdHIGH
78.3%

Malicious tool definition detected

Tool: SKILL.md Description: --- name: openspec-proposal-creation description: Creates structured change proposals with specification deltas for new features, breaking changes, or architecture updates. Use when planning features, creating proposals, speccing changes, introducing new capabilities, or starting development workflows.

reference/EARS_FORMAT.mdHIGH
78.3%

Malicious tool definition detected

Tool: reference/EARS_FORMAT.md [1/2] Description: # EARS Format Guide EARS (Easy Approach to Requirements Syntax) provides a structured format for writing clear, testable requirements.

Tool: reference/EARS_FORMAT.md [2/2] Description: a user provides email "existing@example.com" AND that email is already registered WHEN the user submits the registration form THEN the system rejects the registration AND displays error "This email is already registered" AND does not send an email #### Scenario: Weak Password GIVEN a user provides password "123" WHEN the user submits the registration form THEN the system rejects the registration AND displays error "Password must be at least 8 cha

reference/VALIDATION_PATTERNS.mdHIGH
78.3%

Malicious tool definition detected

Tool: reference/VALIDATION_PATTERNS.md [1/2] Description: # Validation Patterns Grep and bash patterns to validate proposal structure without external CLI tools.

Tool: reference/VALIDATION_PATTERNS.md [2/2]

templates/proposal.mdHIGH
78.3%

Malicious tool definition detected

Tool: templates/proposal.md Description: # Proposal: {Change Title} ## Why [Describe the problem or opportunity] **Context**: - [Background point 1] - [Background point 2] **Current state**: [How things work now] **Desired state**: [How things should work] ## What Changes - [Change 1] - [Change 2] - [Change 3] ## Impact ### Affected Specifications - `spec/specs/{capability}/spec.md` - [What changes]

templates/spec-delta.mdHIGH
78.3%

Malicious tool definition detected

Tool: templates/spec-delta.md Description: # Spec Delta: {Capability Name} This file contains specification changes for `spec/specs/{capability}/spec.md`.

templates/tasks.mdHIGH
78.3%

Malicious tool definition detected

Tool: templates/tasks.md Description: # Implementation Tasks ## Phase 1: Foundation 1.

Audit Metadata
Max File Score
78%
Classification
UNKNOWN_SERVER
Files Scanned
6
Files Flagged
6
Chunks Analyzed
8
Analyzed
Feb 21, 2026, 10:23 AM
Security Audit — runlayer — openspec-proposal-creation