gsdl-verify-gates
Pass
Audited by Gen Agent Trust Hub on Aug 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill is designed to search for and execute shell commands found in various project files such as package.json, Makefile, pyproject.toml, and CI configuration files like .github/workflows/*.yml. This mechanism allows for the execution of arbitrary commands defined within the repository environment.
- [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection by ingesting and acting upon instructions found in external data sources.
- Ingestion points: The skill reads and mirrors commands from SPEC.md, package manifests, and CI configuration files.
- Boundary markers: No explicit boundary markers or 'ignore' instructions are provided to the agent when processing these files.
- Capability inventory: The skill has the capability to execute shell commands and write report files to the local file system.
- Sanitization: There is no evidence of sanitization, validation, or filtering of the commands discovered in the project files before they are executed.
Audit Metadata