gsd-milestone-summary
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes multiple project artifacts to generate a comprehensive summary, creating an attack surface for indirect prompt injection if those files contain adversarial content.
- Ingestion points: The skill reads from
.planning/ROADMAP.md,.planning/PROJECT.md,.planning/STATE.md,.planning/RETROSPECTIVE.md, and various files within.planning/phases/(SUMMARY.md, VERIFICATION.md, CONTEXT.md, RESEARCH.md). - Boundary markers: There are no specific delimiters or instructions defined to isolate the content of these ingested files from the agent's internal reasoning.
- Capability inventory: The skill is granted access to
Read,Write, andBashtools, providing a path for potential command execution if an injection is successful. - Sanitization: The instructions do not specify any validation, sanitization, or filtering of the external documentation content before processing.
Audit Metadata