openspec-archive-change
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local shell commands (
mkdir,mv) and interacts with theopenspecCLI to manage the file system. These operations are intended for archiving project changes and are protected by user-confirmation prompts for critical decisions. - [INDIRECT_PROMPT_INJECTION]: The skill reads local files such as
tasks.mdand specification files to assess project status. While these are external data sources, the skill treats them as data to be parsed (e.g., counting task markers) rather than instructions to be executed. - Ingestion points: Reads
tasks.mdand files withinopenspec/changes/(SKILL.md). - Boundary markers: Not explicitly defined in the prompts when reading files.
- Capability inventory: File system operations (
mkdir,mv) and local CLI execution (openspec). - Sanitization: Variable interpolation like
<name>is used within directory paths and CLI arguments.
Audit Metadata