delineate
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes project files and source code to generate documentation, creating a surface for indirect prompt injection.\n
- Ingestion points: The
Gathersection inSKILL.mdinstructs the agent to readREADME.md,AGENTS.md, and various code entry points to build the system outline.\n - Boundary markers: The instructions lack explicit boundary markers or directives to ignore instructions that might be embedded within the ingested project files.\n
- Capability inventory: The skill possesses the capability to read local files and write or append to documentation files, such as
documentation/outline.mdanddocumentation/glossary.md.\n - Sanitization: No sanitization, validation, or escaping of the content read from files is performed before the agent processes it.
Audit Metadata