gpd-cli
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external sources which could contain instructions to manipulate agent behavior.
- Ingestion points: Data enters the context via
gpd reviews list(which includes review text) andgpd vitals errors reports search(which includes crash report details). - Boundary markers: The skill does not define specific delimiters or instructions to treat fetched external content as data rather than instructions.
- Capability inventory: The skill possesses significant capabilities, including network write operations via
gpd reviews reply, deployment capabilities viagpd publish, and destructive monetization actions viagpd monetization subscriptions delete. - Sanitization: There is no evidence of filtering or sanitization of review text or crash reports before they are processed by the agent.
Audit Metadata