path
Warn
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: MEDIUMDYNAMIC_EXECUTIONDATA_EXFILTRATIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [DYNAMIC_EXECUTION]: The skill implements a runtime selection mechanism in
scripts/status_runtime.pythat usescompile()andexec()to run Python scripts from a project-local directory (.gsd-path/runtime). - This allows the skill to execute code that is not part of the static skill bundle.
- While it performs digest verification against a
manifest.json, the execution of project-local code remains a significant security boundary crossing. - [DATA_EXFILTRATION]: The script
scripts/jev_review.pyis designed to send success criteria and evidence (which may include product code and internal documentation) to an external API atapi.typesafe.aifor screening. - This behavior is optional and requires the
GSD_PATH_JEVenvironment variable to be enabled by the user. - It utilizes an API key (
TYPESAFE_API_KEY) provided via the environment. - [COMMAND_EXECUTION]: The skill relies extensively on
subprocess.run()for Git operations and workflow orchestration. scripts/dispatch_driver.pyfacilitates the execution of arbitrary commands provided aschild-commandarguments to launch sub-agents for building and reviewing tasks.scripts/loop_run.pyexecutes shell commands defined inLOOP.mdfor continuous verification and repair cycles.- [EXTERNAL_DOWNLOADS]:
scripts/check_update.pymakes network requests to the npm registry (registry.npmjs.org) to check for newer versions of the GSD Path package. - [INDIRECT_PROMPT_INJECTION]: The skill has a large ingestion surface, reading various Markdown artifacts (
TASK.md,INTENT.md,SYNTHESIS.md) and product code which is then passed to sub-agents. - Ingestion points: Files are read in
scripts/check_handoffs.py,scripts/isolation.py, andscripts/build_state.py. - Boundary markers: Uses Markdown templates with fenced code blocks to delineate instructions from data.
- Capability inventory: Extensive use of
subprocessand the ability to spawn new agent contexts viadispatch_driver.py. - Sanitization: Relies primarily on the model following complex role-based instructions and structural validators.
Audit Metadata