openspec-archive-change
Pass
Audited by Gen Agent Trust Hub on Mar 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands (
mkdir -p,mv) and theopenspecCLI to manage the lifecycle of change directories. These operations are restricted to the local file system within theopenspec/directory structure. - [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface as it ingests and processes untrusted data from the local environment to determine its execution flow.
- Ingestion points: The skill parses JSON output from
openspec listandopenspec status, and reads the contents oftasks.mdto check for completion markers (- [ ]). - Boundary markers: No specific delimiters or instructions are used to isolate the data being processed from the agent's core instructions.
- Capability inventory: The skill has the capability to modify the file system via
mkdirandmvcommands based on the data it processes. - Sanitization: The skill does not explicitly sanitize the data read from files or CLI outputs before using it in shell command arguments, although it does require user confirmation via the AskUserQuestion tool before proceeding with potentially destructive actions.
Audit Metadata