backend-to-frontend-handoff-docs
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests local source code to generate documentation, creating an attack surface for indirect prompt injection where malicious content in code comments or data structures could influence the generated handoff document.
- Ingestion points: Local backend source code files including endpoints, controllers, services, and DTOs.
- Boundary markers: The skill does not implement explicit delimiters or warnings to ignore embedded instructions within the analyzed code.
- Capability inventory: The skill has the capability to write files to the
.claude/docs/ai/directory. - Sanitization: There is no evidence of sanitization, filtering, or validation of the source code content before it is interpolated into the markdown documentation template.
Audit Metadata