adr-author
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes existing documentation within the project (e.g., in
docs/adr/ordecisions/) to ensure new records match established conventions. While this involves reading local data that could theoretically contain instructions, the skill is constrained to writing documentation and lacks network tools, mitigating risk.\n - Ingestion points: Reads existing files from project directories like
docs/adr/(specified inSKILL.mdStep 1).\n - Boundary markers: The instructions do not define specific delimiters for separating ingested content from instructions.\n
- Capability inventory: The skill is limited to
Read,Glob,Write, andEdittools; no network access or command execution tools are available.\n - Sanitization: No content sanitization is performed on the ingested text.\n- [NO_CODE]: The skill consists exclusively of instructional Markdown and reference templates; it does not contain or execute any scripts, binaries, or external dependencies.
Audit Metadata