kata-sync-docs
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill analyzes untrusted documentation and code from the repository, creating a surface for indirect prompt injection. Ingestion points: The skill reads documentation files, code, and user-provided files as stated in SKILL.md. Boundary markers: The instructions lack explicit markers or warnings to ignore instructions found within the processed data. Capability inventory: The agent is authorized to edit documentation and execute shell commands for verification (SKILL.md). Sanitization: No sanitization of the content extracted from documentation is performed before it is processed or executed.
- [COMMAND_EXECUTION]: The skill instructions state to "Run the narrowest command that proves an example or documented command" (SKILL.md). This allows the agent to execute arbitrary shell commands extracted from the documentation files it is analyzing, which could lead to unintended command execution if the documentation is malicious or contains errors.
Audit Metadata