gsd-spec-phase
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to read and process content from external project files such as PROJECT.md and REQUIREMENTS.md. This constitutes an attack surface where malicious instructions embedded in those files could theoretically influence the agent's behavior, although this is a necessary risk for the skill's intended primary purpose of specification analysis.
Audit Metadata