gsd-map-codebase
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security risks were detected. The skill exclusively uses standard tools like Bash, Grep, and Glob for local filesystem operations.- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted codebase data, which is an inherent surface for indirect prompt injection. Malicious instructions inside the target codebase could theoretically be included in the generated documentation, but the risk is mitigated by the skill's local scope and standard agent guardrails.
Audit Metadata