gsd-cleanup
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
BashandWritetools to perform filesystem operations and archiving. It mitigates risk by requiring a dry-run summary and explicit user confirmation via theAskUserQuestiontool before taking action. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from the local filesystem (directory names in
.planning/phases/) which can influence agent behavior during archiving. - Ingestion points: Filesystem directory structure in
.planning/phases/(referenced in SKILL.md). - Boundary markers: None defined in the instructions to delimit directory names from commands.
- Capability inventory:
Bash,Write,Grep,Read(SKILL.md). - Sanitization: None specified for directory names before they are processed by shell tools.
Audit Metadata