The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill processes a specification file (spec.md) to drive autonomous software development activities, including code generation and execution. An attacker could embed malicious instructions in this specification to influence the generated output or the actions taken by the development tool.
Ingestion points: The spec.md file (referenced via the --context flag) or inline text (via the --context-text flag).
Boundary markers: No explicit boundary markers or 'ignore embedded instructions' warnings are utilized when interpolating specification data.
Capability inventory: The orchestrated tool (gsd) has capabilities to read/write files, execute tests, and perform git operations.
Sanitization: There is no evidence of sanitization or structural validation of the specification content before it is processed by the underlying agent.
[CREDENTIALS_UNSAFE]: The skill documents a mechanism for 'Answer Injection' that involves storing secrets (such as API keys and database URLs) in a local JSON file (answers.json) to be injected into the development environment.
Risk: The instructions recommend initializing a git repository in the project directory where this file might be located, creating a risk of accidental credential exposure if the file is not explicitly ignored by version control.
[COMMAND_EXECUTION]: The skill's primary functionality is achieved by executing the gsd binary as a subprocess. This tool is granted permissions to manage the full software development lifecycle, including file system access and shell command execution for testing.
[DYNAMIC_EXECUTION]: The core purpose of the skill is to enable an autonomous agent (gsd) to plan, code, and test software. This involves the dynamic generation and execution of code based on the provided specifications.
[EXTERNAL_DOWNLOADS]: The documentation references the installation of the gsd tool via the @opengsd/gsd-pi package from the NPM registry. These are legitimate resources provided by the skill author.

gsd-orchestrator