openspec-archive-change
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
openspecCLI commands (list,status) to retrieve project state and standard shell commands (mkdir,mv) to manage directories. These operations are restricted to the local project structure (openspec/changes/) and are necessary for the skill's primary function of archiving changes. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources, including the output of
openspeccommands and the contents of atasks.mdfile. This data is used to generate status summaries and trigger warnings. The risk is mitigated by the inclusion of human-in-the-loop confirmation via theAskUserQuestiontool before proceeding with sensitive operations like syncing or archiving.
Audit Metadata