gsd-eval-review
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill performs audits by reading and interpreting data from
AI-SPEC.mdand historical phase outputs. These files are untrusted inputs that could contain instructions designed to influence the agent's behavior. - Ingestion points: Accesses
AI-SPEC.mdand outputs from completed AI phases (referenced in the objective and context). - Boundary markers: The skill does not define delimiters or specific instructions to isolate or ignore embedded prompts within the documents it processes.
- Capability inventory: The skill utilizes
Read,Write,Bash, andAgenttools to execute its audit logic. - Sanitization: No sanitization, validation, or filtering of the content read from external files is described.
Audit Metadata