review-all-gdds
Warn
Audited by Gen Agent Trust Hub on Nov 10, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONDYNAMIC_CONTEXT_INJECTION
Full Analysis
- [DYNAMIC_CONTEXT_INJECTION]: The skill uses the
!commandsyntax inSKILL.mdto execute a shell script (yaml-helper.sh) at the moment the skill is loaded. While this is used to resolve configuration, it executes code before user review of the skill's specific actions. - [COMMAND_EXECUTION]: The skill contains several
Bashtool definitions that execute scripts (yaml-helper.sh,review-scope.sh) with arguments. Specifically, one tool definition allows passing$ARGUMENTSdirectly into a shell command, which could be exploited for command injection if the input is not strictly validated by the underlying script.
Audit Metadata