gsd-code-review
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
Bashtool to executegsd_runandgsd-tools.cjscommands. These are internal project tools used to dispatch code review lanes and query phase operations. - [DYNAMIC_CONTEXT_INJECTION]: The skill includes an
<arguments>$ARGUMENTS</arguments>block which is standard for argument passing in this environment. It does not use the!\command`` pre-execution syntax. - [PRIVILEGE_ESCALATION]: The skill mentions running without a phase via
gsd_run, but it does not usesudoor attempt to escalate system permissions beyond the project directory. - [DATA_EXPOSURE]: The skill accesses phase state and source files to perform reviews, which is its primary function. It does not send this data to external or untrusted domains.
Audit Metadata