openspec-bulk-archive-change
Pass
Audited by Gen Agent Trust Hub on Feb 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands
mkdirandmvto reorganize directories within the localopenspec/folder. The target paths are dynamically generated based on output from theopenspec listcommand and user selection.\n- [PROMPT_INJECTION]: The skill implements an 'agentic' conflict resolution process that reads and interprets the content of local markdown files such astasks.mdand delta specs. This creates an indirect prompt injection surface where the content of these files could influence the agent's logic for merging specifications.\n - Ingestion points: Reads data from
openspec/changes/<name>/tasks.mdand theopenspec/changes/<name>/specs/directory.\n - Boundary markers: Absent. The agent is instructed to read files to 'understand' and 'determine resolution' without specific delimiters or instructions to ignore embedded commands.\n
- Capability inventory: Local filesystem manipulation via
mkdirandmv, plus execution of theopenspecCLI tool.\n - Sanitization: No specific sanitization or validation of the file content is performed before the agent processes the data.
Audit Metadata