backend-to-frontend-handoff-docs
Pass
Audited by Gen Agent Trust Hub on Jul 4, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill presents an attack surface for indirect prompt injection because it ingests and processes potentially untrusted data from the local filesystem (backend source code).
- Ingestion points: As defined in
SKILL.md, the agent analyzes local source files including endpoints, controllers, services, DTOs, and validation logic. - Boundary markers: The instructions lack explicit boundary markers or directions to ignore instructions embedded within the source code (e.g., in code comments), which could allow an attacker to influence the agent's behavior during the handoff generation process.
- Capability inventory: The skill is authorized to read local files and write markdown documentation to the
.claude/docs/ai/path. - Sanitization: The skill does not implement sanitization or validation of the content extracted from the source code before it is interpolated into the context for documentation generation.
Audit Metadata