update-markdown-file-index

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill reads and processes external data from files in a specified folder to extract descriptions for the index.
  • Ingestion points: Reads the first line comment, header, or inferred purpose from discovered files within the user-provided folder path (SKILL.md).
  • Boundary markers: None provided in the instructions to delimit these extracted descriptions or to instruct the agent to ignore potential commands embedded in the file contents.
  • Capability inventory: The skill utilizes file system discovery and read capabilities for metadata extraction, and write capabilities to update the target markdown file.
  • Sanitization: There is no specified logic to sanitize, escape, or validate the extracted description text before it is incorporated into the prompt context for markdown generation.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 06:50 AM