api-doc-generator
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted source code provided by the user, which presents a surface for indirect prompt injection attacks where malicious instructions could be hidden in comments or docstrings.\n
- Ingestion points: The agent ingests source code snippets to extract API metadata as defined in the Analysis Steps section of SKILL.md.\n
- Boundary markers: The instructions do not specify the use of clear delimiters or instructions for the agent to ignore any natural language commands found within the code being analyzed.\n
- Capability inventory: The skill is designed for text analysis and formatting; it does not utilize any external tools, network capabilities, or file system access, which significantly limits the potential impact of an injection.\n
- Sanitization: There is no requirement or logic provided to sanitize or filter out natural language instructions from the input source code before it is processed by the agent.
Audit Metadata