gsd-add-tests
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes project-specific documentation such as SUMMARY.md and CONTEXT.md to generate test code, which creates a potential surface for indirect prompt injection from those documents. However, this is the primary purpose of the skill and is mitigated by explicit workflow gates requiring user approval for the classification and test plan before any generation occurs.
- [COMMAND_EXECUTION]: The skill utilizes the Bash tool to perform RED-GREEN verification, which involves executing generated test code. This command execution is a core functional requirement of the testing workflow and is governed by the user's prior approval of the test plan.
Audit Metadata