docs
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection due to its requirement to process external, potentially untrusted data.
- Ingestion points: In SKILL.md, the workflows for 'New mode' and 'Edit mode' explicitly instruct the agent to 'Read the code' and 'Read adjacent docs'. These external files may contain malicious instructions designed to hijack the agent's behavior during the documentation process.
- Boundary markers: The instructions lack explicit boundary markers or directions for the agent to treat content from the codebase as untrusted or to ignore instructions embedded within the files being analyzed.
- Capability inventory: The skill is designed to 'Create or update project documentation', which involves reading project files and writing or modifying documentation files (e.g.,
docs/README.md). - Sanitization: There is no mention of sanitization, validation, or filtering of the content read from the source code or existing documentation before it is processed by the agent.
Audit Metadata