gsd-import
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local Node.js script located at
$HOME/.claude/get-shit-done/bin/gsd-tools.cjsusing thenodecommand to handle project migrations. - [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to import external plan files. This creates an attack surface where malicious instructions embedded in the external content could potentially influence the agent's behavior during or after the import process.
Audit Metadata