openspec-bulk-archive
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill reads and processes files from the
openspec/directory, which could contain instructions that influence agent behavior if the files originate from untrusted sources.\n - Ingestion points: Files located in
openspec/changes/andopenspec/specs/are ingested during the archive and merge workflow (SKILL.md).\n - Boundary markers: The instructions do not specify any boundary markers or instructions for the agent to ignore potential commands embedded in the project files.\n
- Capability inventory: The skill includes reading the codebase for conflict resolution, merging content into
openspec/specs/, and moving files to an archive directory.\n - Sanitization: There is no mention of sanitizing or validating the content of the changes or specs prior to merging.
Audit Metadata