openspec-archive-change
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
Bashtool to executeopenspecCLI commands for project management, including listing changes, checking status, and archiving. It also attempts to use standard filesystem utilities likemkdirandmvto organize the archive directory. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and follow instructions provided by the
openspec instructions archiveandopenspec instructions specscommands, which fetch external data that influences agent logic. - Ingestion points: Data is ingested from the output of
openspec instructions(JSON) and the localtasks.mdfile (Markdown). - Boundary markers: The skill contains explicit logic to treat this external data as "advisory" and "optional." It includes instructions to prioritize "controlling inputs" (like CLI checks and resolved paths) over the external guidance if a conflict occurs.
- Capability inventory: The skill has the capability to write to the local filesystem (moving directories) and execute the
openspectool suite via Bash. - Sanitization: The skill employs JSON parsing and logical conflict resolution to prevent external instructions from hijacking the execution flow or bypassing built-in archive logic.
Audit Metadata