openspec-archive-change
Pass
Audited by Gen Agent Trust Hub on Jul 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill performs standard filesystem operations (
mkdir,mv) to organize project files into an archive directory, which is consistent with its stated purpose. - [SAFE]: Security is enhanced through mandatory user confirmation steps; the agent is instructed to use the
AskUserQuestiontool before proceeding if it detects incomplete artifacts or tasks. - [SAFE]: The skill follows the principle of least privilege by restricting tool access to the
openspecnamespace in theallowed-toolsconfiguration. - [SAFE]: Variable interpolation in shell commands uses double-quoting (e.g.,
"<changeRoot>"), which provides a basic layer of protection against unexpected shell word splitting and expansion.
Audit Metadata