readme-generator
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill reads and interprets content from various project files to generate documentation, which exposes the agent to instructions potentially embedded in the source code or configuration files.\n
- Ingestion points: Project manifests (e.g.,
package.json,pyproject.toml), source code entry points (e.g.,index.js,main.py), and configuration examples (.env.example).\n - Boundary markers: The instructions do not specify delimiters or warnings to the agent to ignore potentially malicious instructions within the files it reads.\n
- Capability inventory: The skill uses
bash_toolto list files and possesses capabilities for reading local files and writing the finalREADME.mdto the project root.\n - Sanitization: There is no evidence of sanitization or validation of the data ingested from project files before it is processed by the agent.
Audit Metadata