gsd-audit-uat
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill exhibits a vulnerability surface for indirect prompt injection due to the way it ingests and processes external project data.
- Ingestion points: The skill reads external content from project files located in
.planning/phases/and cross-references them against the broader codebase using theReadandGreptools. - Boundary markers: Absent. The instructions do not specify delimiters or provide warnings for the agent to disregard instructions that might be embedded within the project files it scans.
- Capability inventory: The skill is authorized to use
Bash,Read,Grep, andGlobtools, providing a significant capability set if an injection were successful. - Sanitization: Absent. There is no evidence of content sanitization or validation performed on the files being audited before they are processed in the agent context.
Audit Metadata