gsd-check-todos
Pass
Audited by Gen Agent Trust Hub on Mar 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the Bash tool to perform git commits and update state files, which are standard operations for its workflow.
- [PROMPT_INJECTION]: The skill has an indirect prompt injection surface as it processes untrusted todo content. Ingestion points: ARGUMENTS and todo items. Boundary markers: Absent. Capability inventory: Read, Write, Bash, AskUserQuestion. Sanitization: Absent. No malicious behavior was detected.
Audit Metadata