token-docs

Pass

Audited by Gen Agent Trust Hub on Sep 26, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill includes a TypeScript utility (generate-docs.ts) that ingests data from a local tokens.json file. While this processes external data, the scope is limited to generating documentation files and does not present a threat to the agent's core safety.
  • Ingestion points: The generate-docs.ts script reads from ./tokens.json.
  • Boundary markers: There are no explicit delimiters used during the parsing of the JSON data.
  • Capability inventory: The skill performs local file system writes using fs.writeFileSync.
  • Sanitization: Basic string manipulation is performed for formatting purposes, but comprehensive sanitization is not required for this use case.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 26, 2026, 09:13 AM