install-md
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The references/guide.md file includes multiple bash command snippets (e.g., using grep, sed, head) for the agent to verify the structure and formatting of the install.md file it generates. These are local verification commands used to ensure quality and machine-readability.
- [INDIRECT_PROMPT_INJECTION]: This skill ingests software product information from user queries to generate documentation, which represents an untrusted data ingestion point. The skill defines clear boundary markers using a strict Markdown template and DONE WHEN criteria. The capability inventory for the agent involves writing files and executing local validation scripts. The skill provides sanitization instructions to remove troubleshooting blocks, optional variations, and HTML tags that might contain malicious or conflicting instructions.
Audit Metadata