flask-docs
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill serves as a documentation guide for the Flask web framework. It contains no executable code, script files, or requests for sensitive permissions.
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to read content from the official Flask documentation at
flask.palletsprojects.com. While this represents a potential surface for indirect prompt injection, the use of the official documentation for a well-known project is standard practice for this use case. - Ingestion points: Documentation pages under
https://flask.palletsprojects.com/en/stable/referenced inSKILL.mdandreferences/topic-map.md. - Capability inventory: No file system access, network exfiltration tools, or code execution capabilities are defined or requested.
- Boundary markers: The skill instructions do not explicitly include delimiters for external content.
- Sanitization: No specific sanitization of the documentation content is performed.
Audit Metadata