gsd-pause-work

Pass

Audited by Gen Agent Trust Hub on Jul 11, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the Bash tool to perform standard Git operations, such as creating a work-in-progress (WIP) commit.
  • [PROMPT_INJECTION]: The skill ingests data from external project files to determine the current work phase, which represents a surface for indirect prompt injection.
  • Ingestion points: Recent project files and current phase directory (SKILL.md).
  • Boundary markers: No specific delimiters or warnings are mentioned to separate untrusted file content from agent instructions.
  • Capability inventory: Read, Write, and Bash tools (SKILL.md).
  • Sanitization: No content validation or sanitization of the data read from project files is described.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 11, 2026, 09:38 PM
Security Audit — agent-trust-hub — gsd-pause-work