gen-docs
Pass
Audited by Gen Agent Trust Hub on Jul 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute a local Node.js script
node docs/scripts/sync-changelog.mjs. This is a vendor-owned resource used for project maintenance. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests untrusted data from the repository context.
- Ingestion points: Git commit messages, staged changes,
changelog.md, and project source code (SKILL.md). - Boundary markers: Absent. The instructions do not define delimiters to separate system instructions from the content being processed.
- Capability inventory: The agent has the ability to read all project files and execute shell commands (
node). - Sanitization: Absent. The skill treats data from commits and code as authoritative ground truth for generating documentation without validation.
Audit Metadata