The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill processes user-controlled content from the openspec/changes/ directory to update core project specifications.\n- Ingestion points: Reads delta specifications and task files from the local filesystem during the archive workflow (SKILL.md).\n- Boundary markers: The skill lacks explicit boundary markers or instructions to ignore potential commands embedded in the files being processed.\n- Capability inventory: Possesses capabilities to modify files in openspec/specs/ and move directories on the filesystem.\n- Sanitization: No sanitization or verification of the content in delta specs is performed before merging it into the main specification files.

openspec-archive