openspec-archive-change

Pass

Audited by Gen Agent Trust Hub on Sep 22, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the Bash tool to execute openspec CLI commands for project management, including listing changes, checking status, and archiving. It also attempts to use standard filesystem utilities like mkdir and mv to organize the archive directory.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and follow instructions provided by the openspec instructions archive and openspec instructions specs commands, which fetch external data that influences agent logic.
  • Ingestion points: Data is ingested from the output of openspec instructions (JSON) and the local tasks.md file (Markdown).
  • Boundary markers: The skill contains explicit logic to treat this external data as "advisory" and "optional." It includes instructions to prioritize "controlling inputs" (like CLI checks and resolved paths) over the external guidance if a conflict occurs.
  • Capability inventory: The skill has the capability to write to the local filesystem (moving directories) and execute the openspec tool suite via Bash.
  • Sanitization: The skill employs JSON parsing and logical conflict resolution to prevent external instructions from hijacking the execution flow or bypassing built-in archive logic.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 22, 2026, 07:49 AM