openspec-archive-change
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands via the Bash tool to interact with the openspec CLI and perform file system operations like mkdir and mv. Command arguments, such as change names and paths, are dynamically constructed from user input and tool outputs (e.g., openspec status --json).
- [INDIRECT_PROMPT_INJECTION]: 1. Ingestion points: The skill ingests data from external sources including openspec instructions JSON output, tasks.md, and various specification files (spec.md and delta specs). 2. Boundary markers: The instructions include explicit guardrails to treat external guidance as advisory, separate it from controlling inputs, and prohibit verbatim copying of external context into specs or summaries. 3. Capability inventory: The skill has the capability to execute openspec CLI commands, create directories, and move files on the local filesystem. 4. Sanitization: The skill implements a verification step that compares delta specs against main specs to ensure synchronization was successful before proceeding with archiving.
Audit Metadata