doc-consolidation
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untracked markdown files, which are untrusted inputs that could contain malicious instructions designed to bypass agent logic or corrupt documentation.
- Ingestion point: Candidate files are identified in the repository via
modules/candidate-detection.md. - Boundary markers: The skill implements a two-phase workflow where users must approve a consolidation plan before any actions are taken.
- Capability inventory: The skill can write to files and delete source files, providing a potential impact surface if instructions are ignored.
- Sanitization: No content-level sanitization is performed on the extracted text.
- [COMMAND_EXECUTION]: The skill uses shell commands to interact with the local git repository status.
- Evidence:
modules/candidate-detection.mdusesgit status --porcelainto find untracked files. - [DYNAMIC_EXECUTION]: The skill relies on external scripts and detailed logic to perform its content merging and management tasks.
- Evidence:
SKILL.mdreferencesplugins/sanctum/scripts/consolidation_planner.pyfor planning operations. - Evidence:
modules/merge-execution.mdprovides detailed Python-based logic for file operations and rollback support.
Audit Metadata