openspec-archive-change
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data from CLI-generated instructions, task files, and specification deltas which could theoretically contain malicious directives. It mitigates this risk with robust behavioral instructions that mandate treating external guidance as advisory, resolving conflicts in favor of built-in logic, and strictly forbidding the verbatim copying of external text into the workspace. \n
- Ingestion points:
openspec instructionsoutput,tasks.md, and delta specifications.\n - Boundary markers: None.\n
- Capability inventory: File system modification (
mv,mkdir) andopenspecCLI commands.\n - Sanitization: Explicit constraints against following conflicting instructions or copying external text.\n- [COMMAND_EXECUTION]: The skill utilizes shell commands (
mkdir,mv) and theopenspecCLI to manage change archives. These operations are performed using paths dynamically retrieved from theopenspec statusJSON output, ensuring that file system actions are confined to the validated project and change roots.
Audit Metadata