create-adr

Pass

Audited by Gen Agent Trust Hub on Mar 18, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious patterns, obfuscation, or unauthorized network operations were detected. The skill is constrained to using standard file system tools (Read, Glob, Write, Grep) within the '.chalk/docs/engineering/' directory for its intended purpose of documentation management.
  • [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface by ingesting untrusted content from existing project documents and user arguments to generate new files. * Ingestion points: Reads existing ADRs and engineering docs from '.chalk/docs/engineering/' and accepts '$ARGUMENTS' from the user. * Boundary markers: No explicit delimiters or instructions are provided to the agent to ignore instructions embedded within the source documents. * Capability inventory: The skill uses the 'Write' tool to create markdown files on the local filesystem. * Sanitization: No sanitization or validation of the ingested documentation or user input is performed before the content is drafted into the new ADR.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 18, 2026, 08:10 AM