gsd-autonomous
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data from
ROADMAP.mdand various phase artifacts to determine its autonomous actions. - Ingestion points:
ROADMAP.md,.planning/STATE.md, and phase-specific files (CONTEXT.md, PLANs) inSKILL.md. - Boundary markers: None specified; the agent follows instructions derived from these files.
- Capability inventory: Access to
Bash,Write,Read, andAgenttools across all execution phases inSKILL.md. - Sanitization: No explicit sanitization or validation of the contents of the roadmap or phase artifacts is described.
- [COMMAND_EXECUTION]: The skill executes shell commands via the
Bashtool and a vendor-specific CLI tool (gsd-sdk) to initialize milestones and analyze roadmaps. - [DYNAMIC_EXECUTION]: The skill uses
Skill()flat invocations to dynamically dispatch and execute phase-specific commands based on discovery at runtime.
Audit Metadata