gsd-audit-milestone
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external milestone summary and verification files, which acts as a vulnerability surface for indirect prompt injection.
- Ingestion points: The process reads content from files matching
.planning/phases/*/*-SUMMARY.mdand.planning/phases/*/*-VERIFICATION.md. - Boundary markers: The instructions do not define explicit delimiters or instructions for the agent to ignore potentially malicious embedded content within these files.
- Capability inventory: The skill is configured with access to tools such as
Bash,Task, andWrite, allowing for significant system interaction if the agent is misled by injected content. - Sanitization: No sanitization, filtering, or validation logic is specified for the content read from the audited files.
Audit Metadata