critical
suspicious.generated_source_template_injection
- Location
- agents/gsd-phase-researcher.md:163
- Finding
- User-controlled placeholder is embedded directly into generated source code.
gsd-by-glittercowboy
AdvisoryAudited by Static analysis on May 10, 2026.
Overview
Detected: suspicious.generated_source_template_injection
Findings (5)
critical
suspicious.generated_source_template_injection
- Location
- workflows/discuss-phase.md:51
- Finding
- User-controlled placeholder is embedded directly into generated source code.
critical
suspicious.generated_source_template_injection
- Location
- workflows/plan-phase.md:172
- Finding
- User-controlled placeholder is embedded directly into generated source code.
critical
suspicious.generated_source_template_injection
- Location
- workflows/verify-phase.md:49
- Finding
- User-controlled placeholder is embedded directly into generated source code.
critical
suspicious.generated_source_template_injection
- Location
- workflows/verify-work.md:53
- Finding
- User-controlled placeholder is embedded directly into generated source code.