gsdl-execute
Pass
Audited by Gen Agent Trust Hub on Aug 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses local shell commands for environment validation and source control.
- It executes
git rev-parseandgit remote showto verify the current branch and repository status. - It uses
git addandgit committo track project progress. - It uses
catand shell redirection (heredoc) to format commit messages securely to prevent shell injection from task summaries. - [INDIRECT_PROMPT_INJECTION]: The skill processes task descriptions from a local file which could contain adversarial instructions.
- Ingestion points: The agent reads
.planning/[project-name]/tasks.mdfrom disk to determine its next actions. - Boundary markers: There are no explicit markers or instructions to treat the file content as untrusted data or to ignore embedded instructions within the task list.
- Capability inventory: The agent can write to any file in the workspace root, execute
gitcommands, and trigger other subagents viagsdl-tracker-sync. - Sanitization: No sanitization or validation of the task file content is performed before processing.
Audit Metadata