kb-document-scanning
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill serves as a reference for document discovery, providing standard PowerShell and Bash command templates to locate files. These commands are restricted to file discovery and do not involve network operations or sensitive system modifications.- [SAFE]: Access controls are properly configured in the frontmatter and policy files, disabling implicit and model-level invocation to ensure the skill is only used as a reference cited by other tools.- [INDIRECT_PROMPT_INJECTION]: The skill inventories files that may contain untrusted data. Evidence: 1. Ingestion points: File system discovery for .docx, .xlsx, .pptx, and .pdf files (SKILL.md). 2. Boundary markers: Absent in command templates. 3. Capability inventory: File inventory and git delta detection commands (SKILL.md). 4. Sanitization: Absent. The skill remains safe as it does not parse or interprent the content of the discovered files directly.
Audit Metadata