Skills
Navigate
skills/intent-driven-dev/intent-driven-template/openspec-archive-change/Gen Agent Trust Hub

openspec-archive-change

Pass

Audited by Gen Agent Trust Hub on Oct 22, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill constructs and executes shell commands using variable interpolation for change names.
  • Evidence: openspec status --change "<name>" --json and mv openspec/changes/<name> openspec/changes/archive/YYYY-MM-DD-<name> in SKILL.md.
  • Risk: If a change name contains shell metacharacters (e.g., ;, `, $()), it could lead to arbitrary command execution on the host system.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes untrusted data from local project files and CLI outputs.
  • Ingestion points: The skill reads tasks.md and parses the output of openspec list --json and openspec status --json.
  • Boundary markers: No explicit boundary markers or instructions to ignore embedded commands are present when reading tasks.md.
  • Capability inventory: The skill has the ability to create directories (mkdir), move files (mv), and execute the openspec CLI.
  • Sanitization: No sanitization or validation logic is described for the content of the tasks file or the change names used in command strings.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 22, 2026, 02:17 PM