openspec-config
Pass
Audited by Gen Agent Trust Hub on Apr 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill facilitates indirect prompt injection by design. It allows users to define 'context' and 'rules' in
openspec/config.yamlwhich are automatically injected into artifact instructions for the AI agent. - Ingestion points: The
openspec/config.yamlfile, specifically thecontextandrulesfields, are processed and included in the agent's prompt context. - Boundary markers: The skill documentation specifies that injected content is wrapped in
<project-context>and<project-rules>tags, which helps the model distinguish between instructions and injected data. - Capability inventory: The skill executes shell commands via the
openspecCLI (e.g.,openspec config set) to manage configuration states. - Sanitization: No explicit sanitization or filtering of the content within the configuration file is mentioned beyond the use of XML-style boundary tags.
- [COMMAND_EXECUTION]: The skill uses the
openspecCLI tool to perform various configuration tasks such as listing, getting, setting, and resetting global user settings.
Audit Metadata