technical-writing
Pass
Audited by Gen Agent Trust Hub on Mar 20, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it is designed to ingest and process external files to generate technical documentation.- Ingestion points: Uses the
Read,Glob, andGreptools to retrieve content from files for processing.- Boundary markers: The instructions lack specific delimiters or instructions for the agent to ignore potentially malicious embedded commands within the source material.- Capability inventory: The skill has permissions to create and modify the filesystem usingWriteandEdittools.- Sanitization: No explicit sanitization or validation logic is defined to handle malicious input during the document generation process.- [COMMAND_EXECUTION]: The skill's documentation templates include instructional examples of shell commands such asnpm install,kubectl logs, andcurlfor API requests. These are static text examples intended for technical documentation output and are not executed by the skill itself.
Audit Metadata