Agent skill · Audited from source

Openspec Install

skill · partme-ai/full-stack-skillsApache-2.0 licenceAudited 14 Oct 2026 · source 33e6d8e61ea9

★ 695pushed 8 days ago

!CAUTIONGrade B · 89/100 · 2 findings · 33e6d8e

695repo stars · whole partme-ai/full-stack-skills

Is it safe? With care — CAUTION, grade B (89/100). We read this skill's source at commit 33e6d8e61ea9 and found no filesystem, network or shell access and no hard-coded secrets. The audit raised 2 findings, 0 critical or high. What it does: 这是一个免费的全栈开发所需的技能市场,提供各种实用的 AI 技能集合,支持多种平台。

Ask an AI about this pageGChatGPT CClaude PPerplexity GeGemini XGrok

CoCopilot AIGoogle AI Mode

Cite

Cite this page

ModelsAtlas. “Openspec Install (partme-ai/full-stack-skills)”. Retrieved 14 Oct 2026. https://modelsatlas.com/skills/partme-ai/openspec-install

Trust audit

Audit 0.4.1 · source read 14 Oct 2026

Trust score89/100!CAUTION B

0 critical0 high2 medium0 low0 info

CAUTION means the audit found things worth knowing before you trust this skill. Grade B is shared by 16,667 of 17,602 audited skills.

What the source does

FilesystemNone observedNo reads or writes in the source
NetworkNone observedNo outbound calls in the source
ShellNone observedNo commands run in the source
DependenciesPinnedNothing floats
SecretsNone foundNo keys in source

Five audit layers

Layer	What we check	Result	Findings
`L0` Provenance	Repo owner, licence, archive status, activity	PASS	0
`L1` Static source	Secrets, path traversal, supply chain, hidden code	NA	0
`L2` Instructions	Prompt injection, authority framing, hidden directives	WARN	1
`L3` Inventory	The files and declarations match the source	WARN	1
`L4` Sandbox	Run in isolation and watch behaviour	SKIPPED why	0

Gates applied: no behavioural pass.

Findings (2)

MEDIUMPrompt injectionprompt.conditional_escalation · <listing:description>:1

F-01 Prompt injectionCWE-94 · CWE-1427Layer L2

Install the OpenSpec CLI globally via npm, pnpm, yarn, bun, or nix. Use when the user says "install OpenSpec", "set up OpenSpec", or "openspec command not found".

Why: No further detail recorded for this rule.
Fix: —

MEDIUMInventory / provenanceskill.no_skill_md

F-13 Inventory / provenanceCWE-1104Layer L3

Why: no SKILL.md at the audited path
Fix: a skill without its instruction file cannot be reviewed as one

Audit 0.4.1 · source sha 33e6d8e61ea9 · 14 Oct 2026Report an issue or request a re-scan

Provenance

Who published it, and what the verdict is pinned to

Publisherpartme-ai GitHub organizationOwner of the repository this skill is read from
Source folderpartme-ai/full-stack-skills/skills/openspec-skills/openspec-installThe exact folder we audited
LicenceApache-2.0As the repository states it
Commit pinned for this verdict33e6d8e61ea9A new audit runs when the source changes
Repository statusNot archivedLast push 8 days ago
Sandboxed runNot runSkills are read, not executed; layer L4 is skipped

What it tells the agent

Full source on GitHub ↗

We did not capture a SKILL.md for this skill, so there is no instruction text to quote here.

Install

Pinned to the audited commit 33e6d8e

Download folder ↗

git clone https://github.com/partme-ai/full-stack-skills
git -C full-stack-skills checkout 33e6d8e61ea9

The author documents no install command, so this uses the repository directly. Our verdict covers commit 33e6d8e61ea9 only.

Works in

The author has not said which agents this skill supports, and we have not tested it in any.

Audit history

Every audit, every source change

2026-10-14
!CAUTION B 89 / 100
first audit · source 33e6d8e61ea9

Similar skills

course-designer✓SAFE

teachingai/full-stack-skills

Implement tasks from an OpenSpec change. Use when the user wants to start implementing, continue implementation, or work through tasks.

★ 705Grade B

Nvm✓SAFE

partme-ai/full-stack-skills