gsd-pause-work
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill represents a vulnerability surface because it is designed to read current project files and 'gather state' from them. If these processed files contain malicious instructions disguised as project data, the agent might inadvertently execute them while generating the handoff report. This is a low-severity architectural risk inherent to state-management skills.
Audit Metadata