sdd-explore
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted data from the local codebase and configuration files (such as
openspec/config.yamlandsdd-init/). This creates a surface for indirect prompt injection if the files being analyzed contain malicious instructions disguised as comments, documentation, or data. - Ingestion points: The agent reads project files during 'Step 3: Investigate the Codebase' and retrieves context from
sdd-init/andopenspec/directories. - Boundary markers: No explicit boundary markers or 'ignore' instructions for processed data are defined in this skill.
- Capability inventory: The agent has the capability to read project files and write a new
exploration.mdfile to the filesystem. - Sanitization: No sanitization or filtering logic for the ingested content is specified.
Audit Metadata