docs-content-type-checker
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches documentation guidelines and templates from official Elastic sources, including
elastic.coand theelastic/docs-contentrepository on GitHub. These are legitimate vendor resources used for content validation. - [COMMAND_EXECUTION]: The skill uses file system tools like
Read,Grep, andGlobto access and analyze local documentation files as part of its core validation functionality. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from files or user-provided descriptions, creating a surface for indirect prompt injection attacks.
- Ingestion points: Untrusted data enters the agent context through the
$ARGUMENTSinput and theReadtool, as described inSKILL.md. - Boundary markers: The instructions lack specific delimiters or warnings to the agent to disregard potential instructions embedded within the documentation being reviewed.
- Capability inventory: The skill has access to tools including
Read,Glob,WebFetch, andCallMcpTool(specifically forelastic-docsMCP), as defined in theSKILL.mdfrontmatter. - Sanitization: There are no explicit sanitization or filtering steps defined to process the content before it is analyzed by the agent.
Audit Metadata