openspec-continue
Pass
Audited by Gen Agent Trust Hub on Feb 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
openspeccommand-line utility to query project status and retrieve instruction templates for artifacts such as proposals, specs, designs, and tasks.- [PROMPT_INJECTION]: The skill demonstrates a surface for indirect prompt injection by reading external content into the model context. * Ingestion points: The workflow involves reading data from local files includingproposal.md,specs/**/*.md,design.md, andtasks.md. * Boundary markers: There are no explicit delimiters or delimiters specified to isolate the content of these files from the agent's core operating instructions. * Capability inventory: The skill possesses the ability to execute CLI commands via theopenspectool based on the processed context. * Sanitization: The instructions do not include steps to sanitize or validate the content of the read artifacts before they are used to generate instructions for subsequent steps.
Audit Metadata