gsd-extract-learnings
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from project artifacts such as UAT.md, VERIFICATION.md, and SUMMARY.md.
- Ingestion points: Artifact files PLAN.md, SUMMARY.md, VERIFICATION.md, UAT.md, and STATE.md.
- Boundary markers: The skill does not define specific boundary markers or instructions to ignore embedded commands within the processed files.
- Capability inventory: The skill uses Bash, Read, and Write tools to process data and generate the output file.
- Sanitization: No explicit sanitization or filtering of the artifact content is provided.
Audit Metadata