gsd-debug
Warn
Audited by Snyk on Aug 1, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). The skill reads user-provided free text from
{{GSD_ARGS}}(the text after$gsd-debug) and injects it into the runtime prompt for the spawnedgsd-debuggersubagent, so an outsider can submit poison directly into the workflow that the LLM ingests without selecting a specific item.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata