update-claudes
Pass
Audited by Gen Agent Trust Hub on Jun 26, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill uses
Bashtools for structural project analysis, such as identifying source directories and file counts. These actions are performed locally within the project scope to inform documentation generation and do not involve data exfiltration or unauthorized system access. - [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface, as it ingests project file content and directory metadata to generate development context.
- Ingestion points: Reads project-specific data using
Read,Glob, andBashtools. - Boundary markers: None; instructions do not use delimiters to isolate ingested code from the agent's reasoning process.
- Capability inventory: The skill uses
Write,Edit, andTask(agent delegation) tools to create files and manage sub-agents based on ingested data. - Sanitization: There is no explicit sanitization of the project content before it is processed by the agent.
Audit Metadata