openspec-bulk-apply-change
Pass
Audited by Gen Agent Trust Hub on Jul 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands via
gitand theopenspecCLI to list changes, check status, and manage isolated git worktrees for parallel execution. - [PROMPT_INJECTION]: Indirect injection surface: The skill ingests data from external sources including CLI JSON output (
openspec list,openspec status),contextFiles, andtasksartifacts to inform subagent dispatch. - Ingestion points: JSON output from
openspeccommands and local project files (SKILL.md, Step 3). - Boundary markers: Not explicitly defined in the subagent prompt instructions to separate ingested data from agent commands.
- Capability inventory: Git worktree creation, subagent dispatch, and CLI tool execution (
openspec,git). - Sanitization: No explicit sanitization or validation mentioned for the content of
contextFilesortasksartifacts before processing.
Audit Metadata