gsd-complete-milestone
Pass
Audited by Gen Agent Trust Hub on Apr 3, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes git commands including
git log,git commit, andgit tagto manage project history and create versioned releases as part of the milestone archival process. - [INDIRECT_PROMPT_INJECTION]: The skill processes content from various project files which could potentially contain malicious instructions if the repository includes untrusted contributions.
- Ingestion points: Reads phase
SUMMARY.mdfiles and documents within the.planning/directory (ROADMAP.md, REQUIREMENTS.md). - Boundary markers: None; the skill does not define specific delimiters or instructions to ignore embedded content when reading project files.
- Capability inventory: File system write/delete operations and execution of
gitCLI commands. - Sanitization: None; data extracted from project files is used directly to generate archive content and git tag metadata.
Audit Metadata