codebase-documenter
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill's workflow requires the agent to analyze the user's codebase to generate documentation, which creates a surface for indirect prompt injection if the files contain hidden malicious instructions.
- Ingestion points: The agent reads source code files, configuration files, and existing markdown documentation in the project directory.
- Boundary markers: Absent; there are no instructions for the agent to distinguish between code content and potential instructions embedded in comments or text.
- Capability inventory: The skill utilizes file reading and text generation capabilities to produce documentation output.
- Sanitization: The instructions do not define any filtering or validation processes for the data ingested from the codebase.
Audit Metadata