do-readme-update
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script
update-readme.shexecutes several standard shell commands (git,find,awk,sed) to navigate the repository and process file contents. These operations are scoped to the local repository root and used for their intended purpose of repository maintenance. - [INDIRECT_PROMPT_INJECTION]: The skill implements a catalog generation pattern that reads metadata (name and description) from all
SKILL.mdfiles in the repository and writes them into variousREADME.mdfiles. - Ingestion points: Reads
nameanddescriptionfrontmatter fromSKILL.mdfiles throughout theskills/directory. - Boundary markers: None; the content is interpolated directly into Markdown tables.
- Capability inventory: The script has the capability to write to multiple
README.mdfiles across the repository structure. - Sanitization: It performs basic escaping of pipe characters (
|) to maintain Markdown table integrity and truncates descriptions to the first sentence. - [DYNAMIC_EXECUTION]: The script uses
node -eto execute a small snippet of JavaScript code for parsing theskills.sh.jsonconfiguration file. The JavaScript code is hardcoded within the script and processes local data, which is a common pattern when specialized tools likejqare unavailable.
Audit Metadata