gsd-pause-work
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from local files and phase directories to generate handoff summaries, potentially allowing for adversarial instructions to influence the agent.\n
- Ingestion points: Recent files and phase directory content identified during the pause-work workflow.\n
- Boundary markers: No specific delimiters or boundary instructions are defined to separate the agent's instructions from the content of the files being read.\n
- Capability inventory: The skill is granted Read, Write, and Bash permissions, which could be leveraged if an indirect injection attack is successful.\n
- Sanitization: The workflow does not specify any sanitization, validation, or escaping of the data gathered from the workspace before it is processed.
Audit Metadata