plain-english
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the official Google developer documentation style guide. This is a reference to a well-known and trusted source for documentation standards.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process and rewrite text from various sources such as code comments, PR descriptions, and README files. This ingestion of potentially untrusted data represents an attack surface for indirect prompt injection.
- Ingestion points: External prose in code comments, docstrings, tickets, PR descriptions, and documentation files.
- Boundary markers: None explicitly specified for delimiting untrusted content.
- Capability inventory: None. The skill's actions are limited to formatting and stylistic transformation of text.
- Sanitization: No explicit sanitization or filtering is mentioned for the processed text.
Audit Metadata