gsd-orchestrator
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
gsd-piNode.js package to provide thegsdbinary. This package is a resource provided by the skill's vendor,gsd-build.- [COMMAND_EXECUTION]: The skill orchestrates thegsdCLI tool via shell subprocess commands (e.g.,gsd headless auto). This is the primary mechanism for its autonomous software development functionality.- [DYNAMIC_EXECUTION]: The skill generates project specifications (spec.md) and configuration files (answers.json) at runtime, which are then processed and executed by thegsdCLI tool.- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user-provided specifications to drive the autonomous development process. - Ingestion points: User-provided product specifications passed to
gsdvia the--contextor--context-textflags inSKILL.mdandworkflows/build-from-spec.md. - Boundary markers: The CLI uses distinct flags (
--context,--answers) to separate inputs, and the workflow suggests using structured markdown for specifications. - Capability inventory: The
gsdCLI tool called by the skill has broad capabilities including file system access, network operations (via generated code), and git management. - Sanitization: The skill relies on the internal logic and guardrails of the
gsdtool and the underlying LLM; it does not perform explicit sanitization of the input specification.
Audit Metadata