openspec-archive-change
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the Bash tool to execute
openspecCLI commands for listing changes and checking status, as well as standard filesystem commands likemkdirandmvto organize the archive directory. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from multiple sources, which constitutes an attack surface.
- Ingestion points: Data is retrieved from the
openspec instructionsJSON output,tasks.mdfiles, and specification documents. - Boundary markers: The agent is instructed to treat external guidance as advisory and to explicitly report any conflicts with the skill's hardcoded logic.
- Capability inventory: The skill possesses the ability to modify the filesystem, run CLI tools, and invoke secondary workflows.
- Sanitization: Explicit guardrails prevent the agent from verbatim copying of external instructions and require validation of instructions against the primary workflow steps.
- [DYNAMIC_EXECUTION]: The skill dynamically invokes the
openspec-sync-specsworkflow based on the presence of delta specs, representing a form of runtime logic orchestration.
Audit Metadata