gsd
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
Bashtool extensively for automating common development tasks like repository initialization, running test suites, and managing the file system. These actions are aligned with the skill's primary function as a development assistant. - [INDIRECT_PROMPT_INJECTION]: The system processes information from external sources (web research) and local files (codebase mapping and user requirements), creating a surface for indirect prompt injection.
- Ingestion points: Input from
research/SUMMARY.mdandPROJECT.mdis used to generate implementation plans. - Capability inventory: The agents handling this data have access to tools like
Bash,Write, andEdit. - Sanitization: Safety is managed through verification agents (
gsd-verifier,gsd-plan-checker) that validate the output and structure of the generated work rather than strictly filtering input strings. - [DYNAMIC_EXECUTION]: The
gsd-executoragent generates code and immediately executes it (e.g., vianpm test) as part of its development and verification lifecycle. This is a core feature of the tool and is used to automate the implementation of user requirements.
Audit Metadata