api-doc-generator
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: Potential surface for indirect prompt injection via source code analysis. The skill reads external project files (Java/Kotlin source code) and extracts data from annotations and comments to populate documentation templates. This data is untrusted and could contain malicious instructions designed to influence the agent's behavior during the document generation process.
- Ingestion points: Project source code files with
.javaand.ktextensions are read during the 'Scan Code' and 'Extract Information' steps. - Boundary markers: The instructions do not define specific delimiters or isolation techniques to prevent the agent from following instructions that might be embedded in the extracted comments.
- Capability inventory: The skill has the capability to read any file within the project directory and write content to the
./docsdirectory. - Sanitization: There is no description of sanitization, filtering, or validation for the content extracted from source code before it is interpolated into the output documentation.
Audit Metadata