documentation
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFEPROMPT_INJECTIONNO_CODE
Full Analysis
- [PROMPT_INJECTION]: The skill processes user-provided code and project context to generate documentation, which presents a surface for indirect prompt injection if the source data contains malicious instructions.
- Ingestion points: Project code, structure, and context are ingested for analysis as described in the workflows in
SKILL.md. - Boundary markers: The instructions do not employ specific delimiters or guidance to ignore instructions within the processed content.
- Capability inventory: The skill's primary purpose is text generation and documentation drafting; it does not request tool access in its manifest configuration.
- Sanitization: No explicit sanitization or filtering logic is provided for the ingested content.
- [NO_CODE]: The provided skill files consist solely of Markdown documentation and templates. While the text refers to an external script (
scripts/generate_docs.py), no executable code was included in the analyzed content.
Audit Metadata