gsd-health
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
Bashtool to interact with thegsd-sdkfor context validation and to perform repair operations on the filesystem. - [INDIRECT_PROMPT_INJECTION]: The skill analyzes the
.planning/directory, which may contain untrusted data that could influence agent behavior. - Ingestion points: Files located within the
.planning/directory as processed bySKILL.md. - Boundary markers: The skill lacks explicit markers or instructions to ignore embedded prompts in the analyzed data.
- Capability inventory: The skill has access to
Bash,Write,Read, andAskUserQuestiontools, allowing for substantial system changes. - Sanitization: There is no evidence of sanitization or validation of the content read from the planning directory.
Audit Metadata