gsd-verify-work
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to validate 'built features' through conversational testing, which constitutes a significant ingestion point for untrusted data that could contain malicious instructions.
- Ingestion points: The 'built features' being tested and the conversational user input during UAT (SKILL.md).
- Boundary markers: There are no explicit boundary markers or instructions to ignore embedded commands within the processed data mentioned in the skill definition.
- Capability inventory: The skill is granted access to high-privilege tools including
Bash,Write,Edit, andAgent(SKILL.md: allowed-tools). - Sanitization: The instructions do not specify any sanitization, filtering, or validation steps for the content of the features being verified.
Audit Metadata