add-doc-page
Pass
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: No security issues detected. The skill's operations are confined to documentation and configuration files relevant to its stated purpose. It follows standard practices for a documentation management tool.
- [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection (Category 8) as it derives formatting conventions from existing project documentation. 1. Ingestion points: The skill reads AGENTS.md and sibling documentation files in the docs directory to identify conventions. 2. Boundary markers: There are no explicit delimiters or instructions provided to the agent to ignore potential commands embedded within the documentation files it reads. 3. Capability inventory: The skill utilizes file write and edit permissions for markdown (.md) and TypeScript (.ts) configuration files. 4. Sanitization: No sanitization is performed on the data read from existing files before using it to structure new content.
Audit Metadata