openspec-archive-change
Pass
Audited by Gen Agent Trust Hub on Jul 6, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands (
mkdir,mv) and theopenspecCLI to manage the file system and workflow state. - [COMMAND_EXECUTION]: Input variables like
<name>are used within shell commands for directory creation and file moving. The skill includes specific guardrails requiring the agent to prompt the user to select from a list of valid changes returned by the system (openspec list --json), which mitigates the risk of command injection via unverified input. - [SAFE]: The skill implements multiple user-confirmation checkpoints (using the
AskUserQuestiontool) before proceeding with archive operations if incomplete tasks or artifacts are detected.
Audit Metadata