codebase-documenter
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external codebase content to generate documentation, creating a surface for indirect prompt injection. Malicious instructions in the code could influence the agent during analysis.
- Ingestion points: The skill workflow involves analyzing codebase content as described in
SKILL.md. - Boundary markers: No instructions for using delimiters or 'ignore embedded instructions' prompts are provided.
- Capability inventory: The skill generates documentation output that influences the agent's context.
- Sanitization: No sanitization or validation of the codebase content is performed.
Audit Metadata