documentation-update
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEDYNAMIC_CONTEXT_INJECTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_CONTEXT_INJECTION]: The skill utilizes exclamation mark and backtick syntax placeholders to execute shell commands at load time for document validation. These commands, including
grepandtest, are used to verify the existence of files and the integrity of Markdown table structures within the local repository. These operations are limited to local repository inspection and do not involve network access or sensitive file exposure. - [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface as it ingests data from external
SKILL.mdfiles to generate documentation indices. - Ingestion points: Scanning
skills/*/SKILL.mdfiles to extract frontmatter data. - Boundary markers: None explicitly defined for preventing the interpretation of extracted data as instructions.
- Capability inventory: File read/write operations and shell command execution (
grep,test) inSKILL.mdpatterns. - Sanitization: No specific sanitization or escaping logic is described for the extracted metadata before it is written to index files.
Audit Metadata