openspec-workflow — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited openspec-workflow (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
ssh-licco 使用 OpenSpec 的 spec-driven 工作流管理功能开发。
Propose → Specs → Design → Tasks → Apply → Archive在对话中可以使用以下命令启动对应流程:
| 命令 | 作用 |
|---|---|
/opsx:propose | 发起新变更,生成 proposal/design/tasks |
/opsx:apply | 按 tasks 实现当前变更 |
/opsx:explore | 进入探索模式,梳理需求和分析问题 |
/opsx:archive | 归档已完成的变更 |
用户描述需求后,AI 助手通过 openspec-propose skill 创建:
proposal.md — WHY:变更动机、能力域、影响范围design.md — HOW:技术架构、设计决策tasks.md — DO:checklist 实现任务openspec/specs/ 规范文件产出检查: openspec status --change "<name>" 显示 isComplete: true
通过 openspec-apply-change skill 按 tasks.md 逐个实现:
[x]命令:
# 查看实现进度
openspec instructions apply --change "<change-name>" --json
# 查看变更状态
openspec status --change "<change-name>"通过 openspec-archive-change skill 归档已完成变更:
openspec/changes/archive/YYYY-MM-DD-<name>/命令:
openspec archive <change-name>| 归档 | 日期 | 任务数 |
|---|---|---|
2026-06-01-ssh-mcp-implementation | 2026-06-01 | 46 |
ssh-connection — 4 需求ssh-command-execution — 6 需求ssh-session-management — 6 需求ssh-file-transfer — 4 需求ssh-docker-management — 3 需求ssh-security — 6 需求openspec/config.yaml~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.