gsd-plan-phase

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION

Full Analysis

[INDIRECT_PROMPT_INJECTION]: The skill processes external inputs such as PRD files provided via the --prd argument and research data retrieved using the WebFetch tool. Since the agent is granted high-privilege capabilities including Bash and Write, it is vulnerable to indirect prompt injection if the ingested content contains adversarial instructions intended to hijack the planning process or command execution.

Audit Metadata

Risk Level

SAFE

Analyzed

Sep 16, 2026, 06:54 AM