gsd-path-decide
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates implementation decisions by ingestings data from research evidence files, which presents a surface for indirect prompt injection.
- Ingestion points: Processes
INTENT.md,RESEARCH.md, andevidence-*.mdas specified inSKILL.mdand the decider role brief. - Boundary markers: Employs structural markdown templates (e.g.,
templates/synthesis.md) and explicit role-based constraints defined inreferences/decider.mdto manage context. - Capability inventory: The execution environment allows for Git mutations and arbitrary shell command execution via bundled scripts.
- Sanitization: No specific content filtering or sanitization of ingested markdown evidence is implemented before analysis by the sub-agent.
- [COMMAND_EXECUTION]: The skill provides the agent with high-privilege automation capabilities via shell and Git execution.
- The
scripts/loop_run.pyscript executes shell commands defined in aLOOP.mdspec file using/bin/shorbash.exe. - Scripts such as
scripts/isolation.pyandscripts/pipeline_git.pyexecute various Git commands usingsubprocess.runto manage project structure and lifecycle. - [EXTERNAL_DOWNLOADS]: The skill performs necessary network synchronization for project integration.
scripts/integration.pyuses the GitHub CLI (gh api) to create and manage pull requests on GitHub.com.- Multiple scripts use standard Git commands like
fetch,ls-remote, andpushto interact with remote origin repositories. - [DYNAMIC_EXECUTION]: The skill uses dynamic code patterns to manage its components and maintain state integrity.
scripts/path_config.pyusesimportlib.import_moduleto load sibling runtime scripts.scripts/detect_project.pyutilizesctypesto call low-level Windows APIs (kernel32.dllandntdll.dll) to ensure atomic and safe file creation.
Audit Metadata