loom-documentation
Pass
Audited by Gen Agent Trust Hub on Jul 25, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill creates an indirect prompt injection surface by reading external codebase files and documentation to perform its tasks. Instructions maliciously embedded in these source files could potentially influence the agent's behavior during the documentation process.
- Ingestion points: The skill utilizes tools such as Read, Grep, and Glob to ingest content from the project directory (SKILL.md).
- Boundary markers: There are no specific instructions or boundary markers defined to isolate external content or warn the agent to ignore embedded instructions.
- Capability inventory: The skill is configured with Edit and Write capabilities, enabling it to modify local files based on the information it processes (SKILL.md).
- Sanitization: The skill lacks explicit sanitization or validation logic for the content it reads before using it to generate documentation or perform file modifications.
Audit Metadata