openspec-archive-change
Pass
Audited by Gen Agent Trust Hub on Jul 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
mkdirandmvcommands to manage the directory structure for archived changes. - [COMMAND_EXECUTION]: It invokes the
openspecCLI tool to interact with the project workflow. - [PROMPT_INJECTION]: The agent reads content from
tasks.mdand project specification files to determine archival readiness. Ingestion points:tasks.mdand files inopenspec/changes/<name>/specs/. Boundary markers: None. Capability inventory: shell commands (mkdir,mv) and CLI execution. Sanitization: None. - [DATA_EXFILTRATION]: Accesses and moves project-specific files within the
openspec/directory. All actions are confined to the local filesystem.
Audit Metadata