openspec-archive-change
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill fetches dynamic context and operation guidance from the openspec CLI at runtime to inform its behavior. * Ingestion points: The skill reads external instructions via 'openspec instructions archive' and 'openspec instructions specs'. * Boundary markers: It provides explicit logic to ignore guidance that conflicts with controlling inputs and prevents verbatim copying of instructions into project artifacts. * Capability inventory: The skill utilizes Bash (openspec, mkdir, mv), reads local spec files, and executes an inline synchronization workflow. * Sanitization: A verification step re-runs file comparisons after synchronization to ensure the resulting state is correct, independent of the external instructions.
- [COMMAND_EXECUTION]: The skill executes shell commands to perform file system operations. Evidence includes the use of 'mkdir -p' and 'mv' to manage change archive directories.
Audit Metadata