openspec-bulk-archive-change
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands (
mkdir,mv) and theopenspecCLI to manage files within the local project directory. - [INDIRECT_PROMPT_INJECTION]: The skill reads content from
tasks.mdand specification files to determine completion status and resolve conflicts. - Ingestion points: Reads files from
openspec/changes/<name>/tasks.mdandopenspec/changes/<name>/specs/. - Boundary markers: The instructions do not define explicit delimiters or warnings to ignore embedded instructions when the agent reads and interprets these files.
- Capability inventory: The skill has the capability to execute shell commands (
mkdir,mv) and project-specific CLI tools. - Sanitization: There is no evidence of sanitization or validation of the text content within the processed markdown files.
Audit Metadata