openspec-bulk-archive-change
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
openspecCLI tool to list and validate changes, and uses standard shell commands likemkdirandmvto archive directories. - [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to read and analyze the content of delta specs and codebase implementation to resolve conflicts agentically, creating an attack surface where malicious instructions in project files could influence the agent's behavior.
- Ingestion points: In step 5, the agent reads delta specs and searches the codebase for implementation evidence to determine resolution logic.
- Boundary markers: The instructions do not specify the use of delimiters or specific warnings to ignore instructions embedded within the files being analyzed.
- Capability inventory: The skill has the capability to move directories (
mv) and perform spec synchronization via theopenspectool. - Sanitization: There is no mention of sanitizing or escaping the content retrieved from spec files or the codebase before analysis.
Audit Metadata