openspec-archive-change
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands like
mkdir -pandmvto create archive directories and move project folders. It also relies extensively on theopenspecCLI tool to perform status checks, list changes, and execute the archiving logic. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and act upon data retrieved from the project environment via
openspec instructions archiveandopenspec instructions specs. This data includescontext,operationGuidance, andrulesthat the agent is instructed to "read and consider" or "apply relevant project facts, conventions, and constraints." - Ingestion points: The output of
openspec instructions archiveandopenspec instructions specs(Steps 1 and 4 inSKILL.md). - Boundary markers: The skill provides explicit instructions to the agent to keep this external data separate from built-in steps, report conflicts between guidance and controlling inputs, and avoid copying the guidance text verbatim into specs or summaries.
- Capability inventory: The agent has the ability to write to the file system (
mkdir,mv) and execute variousopenspecCLI subcommands via Bash. - Sanitization: No programmatic sanitization is performed on the semantic content of the instructions; the skill relies on the agent's adherence to the provided guardrails to prevent malicious override of behavior.
Audit Metadata