gd-gdd-creation
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's workflow involves reading project-specific files to gather context for GDD generation, which creates a surface for indirect prompt injection if those files contain malicious instructions.
- Ingestion points: The skill reads
README.md,package.json, andprd.json, and lists all files in thesrc/directory (SKILL.mdunder Step 1: Repository Analysis). - Boundary markers: There are no explicit instructions or delimiters defined to prevent the agent from following instructions embedded within the analyzed project files.
- Capability inventory: The skill utilizes
Read(),Glob(), and web-search capabilities, and it has the primary purpose of writing new design documents to the file system. - Sanitization: The instructions do not specify any validation, filtering, or escaping of the content ingested from the project files before it is processed by the agent.
Audit Metadata