create-readme
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from the target repository, creating a surface for indirect prompt injection.
- Ingestion points: Analyzes repository structure via
lsandfind, reads package manifests, parses source code comments, and processesgit logoutput (commit messages) in Phase 1. - Boundary markers: Employs a mandatory "Discovery Summary" phase that explicitly requires human confirmation before the agent proceeds to generate documentation in Phase 2.
- Capability inventory: Performs file reads, shell commands for repository discovery, and
gitoperations for branching and committing. - Sanitization: The instructions explicitly forbid the inclusion of secret values (passwords, API keys) and require that all generated claims be traceable to empirical evidence identified in the codebase.
- [COMMAND_EXECUTION]: The skill executes various system and git commands to perform its documented discovery and versioning tasks.
- Utilizes
ls -la,find, andgit logto gather repository metadata during the discovery phase. - Performs
git checkoutandgit committo manage the documentation lifecycle and delivery. - Incorporates the use of markdown linters such as
markdownlint,remark, orvaleto verify the generated documentation files.
Audit Metadata