summary-my-repo
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted repository content which could contain malicious instructions designed to influence the agent's behavior during the summarization process.\n
- Ingestion points: The workflow in
SKILL.md(Step 3) directs the agent to read all documentation, core implementation files, and scripts from the target repository.\n - Boundary markers: The skill does not define clear delimiters or instructions for the agent to ignore any prompts embedded within the files being analyzed.\n
- Capability inventory: The agent is granted permission to read from the repository and write output files to the
summary-my-repo/directory.\n - Sanitization: No sanitization or escaping mechanisms are described for the repository content before it is included in the output summary or evidence snippets.
Audit Metadata