gsd-audit-fix
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides a template for a developer-oriented autonomous pipeline. It references a local workflow instruction file located at
~/.claude/gsd-core/workflows/audit-fix.mdand leverages standard development tools (Bash, Edit, Write) for its stated purpose. No obfuscation, prompt injection, or suspicious network activities were found. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from code audit reports to perform modifications, which constitutes an ingestion surface for potentially untrusted data. This surface is integral to the skill's primary function. * Ingestion points: Output from audit commands specified via the
--sourceparameter. * Boundary markers: None explicitly defined in this wrapper. * Capability inventory: Bash, Write, Edit, and Agent tools. * Sanitization: None specified in the current instruction set.
Audit Metadata