gsd-remove-phase
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill implements a routine project management task using standard platform tools (Read, Write, Bash, Glob). It functions as a wrapper for an internal workflow definition located at a vendor-specific path (@{{PLATFORM_ROOT}}/get-shit-done/workflows/remove-phase.md), which is consistent with the author's identification.
- [INDIRECT_PROMPT_INJECTION]: The skill accepts a phase number as an argument and reads roadmap data from the local file system. This constitutes an ingestion surface for data processed by the agent.
- Ingestion points: The $ARGUMENTS variable and roadmap files resolved during the 'init phase-op' step.
- Boundary markers: The process explicitly mentions 'validation gates' (future phase checks and work status checks) to verify input before processing.
- Capability inventory: The skill utilizes Write and Bash tools to modify files and perform Git commits as a historical record.
- Sanitization: Input validation and logical constraints are managed by the referenced internal workflow logic.
Audit Metadata