gpd-betagroups
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to execute shell commands using the
gpdCLI. This creates a surface where malicious user-provided data (e.g., package names or group emails) could potentially lead to command injection if the agent does not properly sanitize these values. - Ingestion points: SKILL.md (via command-line arguments)
- Boundary markers: None provided in the instructions.
- Capability inventory: Shell command execution (gpd)
- Sanitization: No sanitization or input validation logic is defined within the skill.
Audit Metadata