Tom Boucher 899419ebec fix: pipe review prompts via stdin to prevent shell expansion (#2222) ...

When prompt files contain shell metacharacters (\$VAR, backticks,
\$(...)), passing them as -p "\$(cat file)" causes the shell to expand
those sequences before the CLI tool ever receives the text. This
silently corrupts prompts built from user-authored PLAN.md content.

Replace all -p "\$(cat /tmp/gsd-review-prompt-{phase}.md)" patterns
with cat file | cli -p - so the prompt bytes are passed verbatim via
stdin. Affected CLIs: gemini, claude, codex, qwen. OpenCode and cursor
already used the pipe-to-stdin pattern.

Closes #2200

Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-04-15 14:59:31 -04:00

..

add-phase.md

fix: replace /gsd: slash command format with /gsd- skill format in all user-facing content (#1579)

2026-04-04 07:24:31 -04:00

add-tests.md

fix(workflow): add plain-text fallback for AskUserQuestion on non-Claude runtimes (#2042)

2026-04-10 12:30:46 -04:00

add-todo.md

fix(workflow): add plain-text fallback for AskUserQuestion on non-Claude runtimes (#2042)

2026-04-10 12:30:46 -04:00

ai-integration-phase.md

fix(workflow): add plain-text fallback for AskUserQuestion on non-Claude runtimes (#2042)

2026-04-10 12:30:46 -04:00

analyze-dependencies.md

test: add stale /gsd: colon reference regression guard (#1753)

2026-04-05 10:23:41 -04:00

audit-fix.md

feat(commands): add /gsd-audit-fix for autonomous audit-to-fix pipeline (#1814)

2026-04-05 23:07:52 -04:00

audit-milestone.md

fix: replace /gsd: slash command format with /gsd- skill format in all user-facing content (#1579)

2026-04-04 07:24:31 -04:00

audit-uat.md

fix: replace /gsd: slash command format with /gsd- skill format in all user-facing content (#1579)

2026-04-04 07:24:31 -04:00

autonomous.md

fix: extract smart_discuss step to reference to reduce autonomous.md token count (#2227)

2026-04-15 14:59:18 -04:00

check-todos.md

fix(workflow): add plain-text fallback for AskUserQuestion on non-Claude runtimes (#2042)

2026-04-10 12:30:46 -04:00

cleanup.md

fix(workflow): add plain-text fallback for AskUserQuestion on non-Claude runtimes (#2042)

2026-04-10 12:30:46 -04:00

code-review-fix.md

feat: add /gsd:code-review and /gsd:code-review-fix commands (#1630)

2026-04-05 19:43:45 -04:00

code-review.md

fix(2134): fix code-review SUMMARY.md parser section-reset for top-level keys (#2142)

2026-04-12 08:10:30 -04:00

complete-milestone.md

feat: open artifact audit gate for milestone close and phase verify (#2157, #2158) (#2160)

2026-04-12 10:06:42 -04:00

diagnose-issues.md

fix(worktree): use hard reset to correct file tree when branch base is wrong (#1982)

2026-04-10 10:49:20 -04:00

discovery-phase.md

fix(workflow): add plain-text fallback for AskUserQuestion on non-Claude runtimes (#2042)

2026-04-10 12:30:46 -04:00

discuss-phase-assumptions.md

fix: replace /gsd: slash command format with /gsd- skill format in all user-facing content (#1579)

2026-04-04 07:24:31 -04:00

discuss-phase-power.md

test: add stale /gsd: colon reference regression guard (#1753)

2026-04-05 10:23:41 -04:00

discuss-phase.md

feat(discuss-phase): adapt gray area language for non-technical owners via USER-PROFILE.md (#2125) (#2173)

2026-04-12 16:45:29 -04:00

do.md

fix(workflow): add plain-text fallback for AskUserQuestion on non-Claude runtimes (#2042)

2026-04-10 12:30:46 -04:00

docs-update.md

fix(workflow): add plain-text fallback for AskUserQuestion on non-Claude runtimes (#2042)

2026-04-10 12:30:46 -04:00

eval-review.md

fix(workflow): add plain-text fallback for AskUserQuestion on non-Claude runtimes (#2042)

2026-04-10 12:30:46 -04:00

execute-phase.md

fix(worktree): add pre-merge deletion guard to quick.md; fix backup handling on conflict (#2275)

2026-04-15 14:58:43 -04:00

execute-plan.md

fix(workflow): correct grep anchor and add threshold=0 guard (#1979)

2026-04-11 03:33:29 -07:00

explore.md

feat(commands): add /gsd-explore for Socratic ideation and idea routing (#1813)

2026-04-05 18:33:27 -04:00

extract_learnings.md

feat(workflow): add extract-learnings command for phase knowledge capture (#1873)

2026-04-11 09:28:16 -04:00

fast.md

fix: replace /gsd: slash command format with /gsd- skill format in all user-facing content (#1579)

2026-04-04 07:24:31 -04:00

forensics.md

fix: replace /gsd: slash command format with /gsd- skill format in all user-facing content (#1579)

2026-04-04 07:24:31 -04:00

health.md

fix: replace /gsd: slash command format with /gsd- skill format in all user-facing content (#1579)

2026-04-04 07:24:31 -04:00

help.md

feat(review): add Qwen Code and Cursor CLI as peer reviewers (#1966)

2026-04-10 15:19:56 -04:00

import.md

fix(workflow): add plain-text fallback for AskUserQuestion on non-Claude runtimes (#2042)

2026-04-10 12:30:46 -04:00

inbox.md

fix(workflow): add plain-text fallback for AskUserQuestion on non-Claude runtimes (#2042)

2026-04-10 12:30:46 -04:00

insert-phase.md

fix: replace /gsd: slash command format with /gsd- skill format in all user-facing content (#1579)

2026-04-04 07:24:31 -04:00

list-phase-assumptions.md

fix: replace /gsd: slash command format with /gsd- skill format in all user-facing content (#1579)

2026-04-04 07:24:31 -04:00

list-workspaces.md

fix: replace /gsd: slash command format with /gsd- skill format in all user-facing content (#1579)

2026-04-04 07:24:31 -04:00

manager.md

fix(workflow): add plain-text fallback for AskUserQuestion on non-Claude runtimes (#2042)

2026-04-10 12:30:46 -04:00

map-codebase.md

fix: replace /gsd: slash command format with /gsd- skill format in all user-facing content (#1579)

2026-04-04 07:24:31 -04:00

milestone-summary.md

fix: replace /gsd: slash command format with /gsd- skill format in all user-facing content (#1579)

2026-04-04 07:24:31 -04:00

new-milestone.md

feat(workflow): scan planted seeds during new-milestone step 2.5 (#2177)

2026-04-12 17:56:00 -04:00

new-project.md

fix(workflow): add plain-text fallback for AskUserQuestion on non-Claude runtimes (#2042)

2026-04-10 12:30:46 -04:00

new-workspace.md

fix(workflow): quote path variables in workspace next-step examples (#2096)

2026-04-11 09:02:18 -04:00

next.md

enhancement(workflow): replace consecutive-call counter with prior-phase completeness scan in /gsd-next (#2097)

2026-04-11 09:02:30 -04:00

node-repair.md

feat: add node repair operator for autonomous task failure recovery (#1016)

2026-03-12 11:35:45 -06:00

note.md

fix(workflow): add plain-text fallback for AskUserQuestion on non-Claude runtimes (#2042)

2026-04-10 12:30:46 -04:00

pause-work.md

fix: replace /gsd: slash command format with /gsd- skill format in all user-facing content (#1579)

2026-04-04 07:24:31 -04:00

plan-milestone-gaps.md

fix: replace /gsd: slash command format with /gsd- skill format in all user-facing content (#1579)

2026-04-04 07:24:31 -04:00

plan-phase.md

fix(init): embed auto_advance/auto_chain_active/mode in init plan-phase output (#2228)

2026-04-15 14:59:15 -04:00

plant-seed.md

fix(workflow): add plain-text fallback for AskUserQuestion on non-Claude runtimes (#2042)

2026-04-10 12:30:46 -04:00

pr-branch.md

fix(workflow): preserve structural planning commits in gsd-pr-branch (#2031)

2026-04-10 11:25:55 -04:00

profile-user.md

fix(workflow): add plain-text fallback for AskUserQuestion on non-Claude runtimes (#2042)

2026-04-10 12:30:46 -04:00

progress.md

fix: replace /gsd: slash command format with /gsd- skill format in all user-facing content (#1579)

2026-04-04 07:24:31 -04:00

quick.md

fix(worktree): add pre-merge deletion guard to quick.md; fix backup handling on conflict (#2275)

2026-04-15 14:58:43 -04:00

remove-phase.md

fix: replace /gsd: slash command format with /gsd- skill format in all user-facing content (#1579)

2026-04-04 07:24:31 -04:00

remove-workspace.md

fix(workflow): quote path variables in workspace next-step examples (#2096)

2026-04-11 09:02:18 -04:00

research-phase.md

fix: replace /gsd: slash command format with /gsd- skill format in all user-facing content (#1579)

2026-04-04 07:24:31 -04:00

resume-project.md

fix: replace /gsd: slash command format with /gsd- skill format in all user-facing content (#1579)

2026-04-04 07:24:31 -04:00

review.md

fix: pipe review prompts via stdin to prevent shell expansion (#2222)

2026-04-15 14:59:31 -04:00

scan.md

feat(commands): add /gsd-scan for rapid single-focus codebase assessment (#1808)

2026-04-05 17:04:33 -04:00

secure-phase.md

fix(workflow): add plain-text fallback for AskUserQuestion on non-Claude runtimes (#2042)

2026-04-10 12:30:46 -04:00

session-report.md

fix: replace /gsd: slash command format with /gsd- skill format in all user-facing content (#1579)

2026-04-04 07:24:31 -04:00

settings.md

fix(workflow): add plain-text fallback for AskUserQuestion on non-Claude runtimes (#2042)

2026-04-10 12:30:46 -04:00

ship.md

feat(ship): add external code review command hook to ship workflow

2026-04-11 09:19:32 -04:00

stats.md

fix: replace /gsd: slash command format with /gsd- skill format in all user-facing content (#1579)

2026-04-04 07:24:31 -04:00

transition.md

fix: replace /gsd: slash command format with /gsd- skill format in all user-facing content (#1579)

2026-04-04 07:24:31 -04:00

ui-phase.md

fix(workflow): add plain-text fallback for AskUserQuestion on non-Claude runtimes (#2042)

2026-04-10 12:30:46 -04:00

ui-review.md

fix(workflow): add plain-text fallback for AskUserQuestion on non-Claude runtimes (#2042)

2026-04-10 12:30:46 -04:00

undo.md

fix(workflow): add plain-text fallback for AskUserQuestion on non-Claude runtimes (#2042)

2026-04-10 12:30:46 -04:00

update.md

fix(installer): restore detect-custom-files and backup_custom_files lost in release drift (#1997) (#2233)

2026-04-14 18:50:53 -04:00

validate-phase.md

fix(workflow): add plain-text fallback for AskUserQuestion on non-Claude runtimes (#2042)

2026-04-10 12:30:46 -04:00

verify-phase.md

feat: harness engineering improvements — post-merge test gate, shared file isolation, behavioral verification (#1486)

2026-04-10 10:42:45 -04:00

verify-work.md

fix: remove head -5 truncation from UAT file listing in verify-work (#2172)

2026-04-12 16:06:17 -04:00