reading-livekit-docs
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external sources, specifically the official LiveKit documentation site and the output of the
lk docsCLI. - Ingestion points: Commands such as
lk docs searchand instructions to perform web searches againstdocs.livekit.io(SKILL.md). - Boundary markers: The skill does not define specific delimiters or instructions for the agent to isolate external content from its own instruction context.
- Capability inventory: The skill utilizes command-line execution for the
lkutility. - Sanitization: No explicit sanitization or validation of the fetched documentation content is mentioned.
- [COMMAND_EXECUTION]: The skill instructs the agent to execute the
lk docsCLI command to interact with documentation. This is a legitimate use of a vendor-provided tool for the skill's primary purpose.
Audit Metadata