update-readme
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes project data to generate documentation, which creates a potential surface for indirect prompt injection.
- Ingestion points: The skill reads repository contents, specifically descriptor files (SKILL.md) and git logs, across the project structure.
- Boundary markers: The skill does not specify explicit delimiters or "ignore instructions" guards for the data being read.
- Capability inventory: The skill utilizes the 'Edit' and 'Write' tools to modify root-level README files.
- Sanitization: The skill lacks explicit sanitization or filtering of external strings before writing them to documentation. Despite this surface, the risk is minimal as the skill is restricted to root-level files and follows highly specific templates that limit the impact of untrusted input.
- [SAFE]: No patterns of code obfuscation, credential exposure, or unauthorized network operations were detected. The skill's instructions focus on documentation quality and stylistic consistency.
Audit Metadata