grill-with-docs
Pass
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: SAFENO_CODEPROMPT_INJECTION
Full Analysis
- [NO_CODE]: The skill consists entirely of markdown instructions and metadata, with no accompanying executable scripts, binaries, or configuration files that could pose a direct execution risk.
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because its core function involves ingesting and acting upon untrusted data from the local repository environment.
- Ingestion points: The agent is instructed to read root documentation (README.md), glossary files, Architecture Decision Records (ADRs), and source code files (Workflow Step 1 and 4).
- Boundary markers: The skill does not define specific delimiters or instructions to ignore potential commands embedded within the documents or code it analyzes.
- Capability inventory: The skill instructs the agent to perform file reads and potentially file writes when recording decisions or updating documentation (Workflow Step 5).
- Sanitization: There are no instructions for sanitizing or validating the content of the documentation files before processing.
Audit Metadata