gsd-execute-phase
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill serves as an orchestrator that ingests phase plan files and user-provided arguments from
$ARGUMENTS. This creates a surface for indirect prompt injection if those plans contain instructions intended to influence the agent's behavior. - Ingestion points: Processes command-line arguments and plan files discovered in the project directory via the
GlobandReadtools. - Boundary markers: No explicit boundary markers or instructions to ignore embedded commands are present in this wrapper.
- Capability inventory: The skill is granted access to high-impact tools including
Bash(command execution),Write/Edit(file system modification), andAgent(subagent spawning). - Sanitization: There is no evidence of sanitization or validation of the content within the plans or arguments before they are used to drive the workflow.
Audit Metadata