gsd-audit-milestone
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill reads and processes project-related files which serves as a surface for indirect instructions to influence the agent.
- Ingestion points: The skill uses
GlobandReadtools to ingest content from.planning/phases/*/*-SUMMARY.mdand.planning/phases/*/*-VERIFICATION.md. - Boundary markers: There are no explicit delimiters or instructions provided to the agent to distinguish between data and instructions within the ingested files.
- Capability inventory: The skill has access to
Bash,Write, andAgenttools, which provides a path for command execution or lateral movement if malicious instructions are embedded in the read files. - Sanitization: No sanitization or validation logic is specified for the content retrieved from the planning and verification files.
Audit Metadata