openspec-archive-change

Pass

Audited by Gen Agent Trust Hub on Jun 24, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes the openspec CLI to retrieve change lists and status information. It also uses shell commands (mkdir, mv) to manage the archive directory structure and relocate change assets.
  • [INDIRECT_PROMPT_INJECTION]: The skill parses content from a local tasks.md file to evaluate the status of a change. • Ingestion points: Reads local tasks.md file from the workspace. • Boundary markers: No explicit delimiters or instructions are used to separate file content from agent logic. • Capability inventory: Executes file system modifications and CLI tool commands. • Sanitization: No explicit validation of the file content is performed, though the instruction specifically limits the agent to counting markdown checkboxes.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 24, 2026, 06:39 AM
Security Audit — agent-trust-hub — openspec-archive-change