c4-code
Pass
Audited by Gen Agent Trust Hub on May 3, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it is designed to ingest and analyze untrusted source code from directories.
- Ingestion points: The agent reads source code directories and files to perform static analysis and documentation generation.
- Boundary markers: The instructions lack explicit boundary markers or directives to ignore instructions embedded within the code, comments, or strings of the analyzed files.
- Capability inventory: The skill's primary capabilities involve reading files and generating structured markdown and Mermaid diagrams. It does not perform network operations or execute shell commands.
- Sanitization: There is no specified sanitization or filtering logic to prevent the agent from obeying malicious instructions hidden in the analyzed data.
Audit Metadata