openspec-bulk-archive-change
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
Bashtool to executeopenspecCLI commands (list,status,sync-specs) and standard filesystem operations includingmkdirandmvto archive directories. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection through its conflict resolution logic.
- Ingestion points: The agent is instructed to read local files, specifically delta specs (Step 5a) and the broader codebase (Step 5b), to find implementation evidence.
- Boundary markers: The instructions lack explicit delimiters or warnings to ignore instructions that might be embedded within the project files or specifications being analyzed.
- Capability inventory: The agent has the capability to move files (
mv), create directories (mkdir), and modify project specifications viaopenspectools. - Sanitization: There is no mention of sanitizing or validating the content read from files before the agent uses it to determine the order of operations or the rationale for conflict resolution.
Audit Metadata