openspec-propose

Pass

Audited by Gen Agent Trust Hub on Apr 22, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill relies on the openspec CLI tool to perform operations such as creating new changes (openspec new change), checking status (openspec status), and retrieving instructions (openspec instructions). These commands are executed locally to manage project structure.
  • [PROMPT_INJECTION]: The skill involves reading data from local artifact files and CLI outputs to generate subsequent documentation, which presents a surface for indirect prompt injection.
  • Ingestion points: Data is ingested from the JSON output of the openspec instructions command and from the content of previously completed dependency artifacts (e.g., proposal.md, design.md).
  • Boundary markers: Absent. The skill does not use specific delimiters or instructions to the agent to disregard potential commands embedded within the ingested files.
  • Capability inventory: The agent has the capability to execute shell commands via the openspec CLI and write files to the filesystem.
  • Sanitization: Absent. There is no explicit requirement to sanitize or validate the content retrieved from artifacts before processing it.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 22, 2026, 07:50 PM