grill-with-docs
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill operates as an interactive documentation and design review tool. It uses standard file-system tools (Read, Grep, Glob, Bash, Write, Edit) to process local project information. No evidence of data exfiltration, obfuscation, or remote code execution was found. All operations are confined to the local project scope for the purpose of updating CONTEXT.md and ADR files.
- [INDIRECT_PROMPT_INJECTION]: The skill reads external project documentation and source code, creating a potential surface for indirect prompt injection if those files contain malicious instructions.
- Ingestion points: Reads local domain documentation (
CONTEXT.md,docs/adr/) and source files. - Boundary markers: None specified in the instructions.
- Capability inventory: The skill has the ability to modify files (
Write,Edit) and execute shell commands (Bash). - Sanitization: No specific input sanitization or filtering logic is provided for the content read from the codebase.
Audit Metadata