token-docs
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill includes a TypeScript utility (
generate-docs.ts) that ingests data from a localtokens.jsonfile. While this processes external data, the scope is limited to generating documentation files and does not present a threat to the agent's core safety. - Ingestion points: The
generate-docs.tsscript reads from./tokens.json. - Boundary markers: There are no explicit delimiters used during the parsing of the JSON data.
- Capability inventory: The skill performs local file system writes using
fs.writeFileSync. - Sanitization: Basic string manipulation is performed for formatting purposes, but comprehensive sanitization is not required for this use case.
Audit Metadata