openspec-archive-change
Pass
Audited by Gen Agent Trust Hub on Jun 24, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the openspec CLI to retrieve change lists and status information. It also uses shell commands (mkdir, mv) to manage the archive directory structure and relocate change assets.
- [INDIRECT_PROMPT_INJECTION]: The skill parses content from a local tasks.md file to evaluate the status of a change. • Ingestion points: Reads local tasks.md file from the workspace. • Boundary markers: No explicit delimiters or instructions are used to separate file content from agent logic. • Capability inventory: Executes file system modifications and CLI tool commands. • Sanitization: No explicit validation of the file content is performed, though the instruction specifically limits the agent to counting markdown checkboxes.
Audit Metadata