openspec-archive-change
Pass
Audited by Gen Agent Trust Hub on Mar 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
openspecCLI and basic filesystem commands (mkdir,mv) to move project directories to an archive location. These operations are performed on local paths and are necessary for the skill's intended functionality. - [PROMPT_INJECTION]: The skill ingests data from external sources, creating a surface for indirect prompt injection.
- Ingestion points: Reads the local
tasks.mdfile to check task completion and parses JSON output from theopenspec statuscommand. - Boundary markers: The skill does not use specific delimiters or instructions to ignore embedded commands within the processed data.
- Capability inventory: The skill can create directories, move files, and invoke other agent skills to synchronize specifications.
- Sanitization: The logic counts specific markdown markers (
- [ ]) but lacks general sanitization for the rest of the ingested file content.
Audit Metadata