openspec-bulk-archive-change
Pass
Audited by Gen Agent Trust Hub on Nov 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill facilitates the management of change sets within the 'openspec' framework. Its operations are restricted to listing status, syncing documentation, and moving directories to an archive location. No malicious intent or unauthorized access patterns were detected.
- [COMMAND_EXECUTION]: The skill utilizes the 'openspec' CLI tool to interact with the project environment. It executes commands such as 'openspec list' and 'openspec status' to gather metadata about active changes. These are standard operations for the tool's intended use case.
- [INDIRECT_PROMPT_INJECTION]: The skill reads and processes user-controlled content from change files.
- Ingestion points: Reads from 'openspec/changes//tasks.md', 'spec.md', and 'GLOSSARY.md' files.
- Boundary markers: Absent; content is read directly into the agent's context for analysis and summary generation.
- Capability inventory: File reads, file moves, and 'openspec' CLI execution.
- Sanitization: Absent; content is handled as-is.
- Risk Factor: The risk is minimal as the skill operates on trusted project documentation and performs limited, non-privileged actions.
Audit Metadata