gsd-check-todos
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill reads and loads context from external todo files. If these files contain malicious instructions, the agent could potentially execute them given its access to powerful tools like Bash and file system Write operations.
- [COMMAND_EXECUTION]: The skill utilizes the Bash tool to perform git commits and state updates as part of its documented workflow.
Audit Metadata