openspec-bulk-archive-change
Pass
Audited by Gen Agent Trust Hub on Apr 17, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses local shell commands like
mkdirandmvto organize change directories into an archive folder. - [COMMAND_EXECUTION]: It orchestrates the
openspecCLI tool to query the status of changes and synchronize specifications across the project. - [PROMPT_INJECTION]: The skill ingests untrusted data from the codebase to perform agentic conflict resolution. Ingestion points: local files located in
openspec/changes/<name>/tasks.mdandopenspec/changes/<name>/specs/. Boundary markers: absent. Capability inventory: file system moves (mv), directory creation (mkdir), and specification synchronization. Sanitization: absent. - [SAFE]: All operations are confined to the local project environment and the specific
openspecdirectory structure. No network exfiltration, hardcoded credentials, or unauthorized system access patterns were found.
Audit Metadata