gsd-config
Pass
Audited by Gen Agent Trust Hub on Jul 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
Bashtool to run thegsd-toolsCLI. It interpolates a profile name directly from the$ARGUMENTSvariable into a shell command template:gsd-tools query config-set-model-profile <profile-name> --raw. - [EXTERNAL_DOWNLOADS]: The skill provides an installation command for the
@opengsd/gsd-corepackage vianpmif the required CLI tool is missing from the environment. - [PROMPT_INJECTION]: The skill ingests untrusted user input from the
$ARGUMENTSvariable. Ingestion points:$ARGUMENTSvariable inSKILL.mdused for routing and command parameters. Boundary markers: None; the input is used directly after parsing the first token. Capability inventory: The skill has access toBash,Read,Write, andAskUserQuestiontools. Sanitization: There are no instructions to sanitize, escape, or validate the$ARGUMENTScontent before passing it to theBashtool.
Audit Metadata