api-documentation-generator
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill analyzes external codebase content to generate documentation, creating a surface for indirect prompt injection if the source files contain malicious instructions.
- Ingestion points: Codebase analysis for endpoints, routes, and body structures in SKILL.md.
- Boundary markers: No explicit boundary markers or delimiters are defined to separate code content from agent instructions.
- Capability inventory: The skill focuses on file reading and text generation; no dangerous tools, subprocess execution, or network calls are invoked by the skill itself.
- Sanitization: The instructions do not specify sanitization or validation of the content extracted from the code files.
Audit Metadata