update-docs
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill defines a standard documentation maintenance process. It involves reading project source files to verify and update README files and CLI help text. No evidence of malicious behavior, unauthorized file access, or remote connections was detected.
- [INDIRECT_PROMPT_INJECTION]: The skill uses project source code as ingestion points for documentation verification. Ingestion points: Local files such as
sdk/src/index.tsandsrc/engine/PaletteEngine.ts. Boundary markers: None. Capability inventory: The skill does not define any shell execution, network access, or dynamic code capabilities. Sanitization: None. Given the context of documentation auditing without execution capabilities, this surface is considered safe.
Audit Metadata