gsd-update
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill interacts with the npm registry to check for and download updates to the GSD tool. This is a well-known service and the operation is central to the skill's primary function.
- [INDIRECT_PROMPT_INJECTION]: The workflow includes fetching and displaying an external changelog. This creates a potential surface for indirect prompt injection where malicious instructions in the changelog could influence the agent, representing a minor security risk inherent to processing external text.
Audit Metadata