gsd-cleanup
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests directory listings and file content from the ".planning/phases/" directory to automate the archival of completed milestones. This data ingestion surface allows for potential indirect prompt injection if directory names or phase contents are maliciously crafted to influence the agent's behavior.
- Ingestion points: Directory trees and phase metadata files within ".planning/phases/" accessed via Read and Bash tools.
- Boundary markers: No explicit instructions are provided to distinguish between system instructions and the data being processed.
- Capability inventory: The skill possesses Bash execution, file system Write access, and Read capabilities.
- Sanitization: No input validation or sanitization of the folder structure or metadata content is mentioned.
Audit Metadata