sdd-propose
Pass
Audited by Gen Agent Trust Hub on Mar 16, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted input from exploration analysis and user descriptions, which are used to generate the change proposal. This data is interpolated into the document without sanitization or the use of boundary markers, creating a potential surface for indirect prompt injection.\n
- Ingestion points:
SKILL.md(reads exploration content viamem_get_observationand takes direct user input).\n - Boundary markers: Absent (uses direct markdown interpolation).\n
- Capability inventory: Filesystem writes to the
openspec/directory and memory updates viamem_savecalls as described inSKILL.md.\n - Sanitization: None identified for processed inputs.
Audit Metadata