openspec-archive-change
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local shell commands (
mkdir,mv) and theopenspecCLI to manage the project's directory structure and archive changes. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from files and CLI outputs that could be influenced by third-party content.
- Ingestion points: Reads
tasks.md, spec files inopenspec/changes/, and output fromopenspec listandopenspec status. - Boundary markers: None observed in the instructions to distinguish file content from agent instructions.
- Capability inventory: Includes file system modifications (
mkdir,mv) and interaction with theopenspecCLI. - Sanitization: No specific sanitization or validation of the content of
tasks.mdor spec files is described.
Audit Metadata