document-generate
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill reads and processes untrusted codebase files to generate documentation, creating a surface for indirect prompt injection where instructions embedded in code or comments could influence agent behavior.
- Ingestion points: Step 1 (Codebase Archaeology) reads implementation files, READMEs, tests, and configuration files end-to-end.
- Boundary markers: No explicit delimiters or instructions to ignore embedded commands are used when reading project files.
- Capability inventory: The skill has access to Bash, Write, and Edit tools, allowing it to modify files or execute shell commands.
- Sanitization: There is no specific sanitization or validation of the ingested code content before it is processed by the model for documentation generation.
Audit Metadata