bootstrap-agents-md
Warn
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: MEDIUMDYNAMIC_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [DYNAMIC_EXECUTION]: The script
scripts/test_validate_agents_md.pyutilizesimportlib.utilto dynamically load and execute thevalidate_agents_md.pymodule from the file system at runtime. - [COMMAND_EXECUTION]: The script
scripts/test_skill.pyinvokessubprocess.run()to execute several Python scripts as sub-processes, using a path provided as a command-line argument. - [INDIRECT_PROMPT_INJECTION]: The skill's workflow involves reading existing project files and instruction sets to inform the generation of new guidance, which represents an indirect prompt injection surface.
- Ingestion points:
SKILL.mddirects the agent to read workspace files and existing root instruction files as evidence. - Boundary markers: No explicit delimiters or warnings are used to prevent the agent from following instructions embedded in the analyzed evidence.
- Capability inventory: The skill can write to the file system and execute internal scripts.
- Sanitization: There is no evidence of content sanitization for ingested data.
- [EXTERNAL_DOWNLOADS]: The
references/source-notes.mdfile contains references to documentation and resources from Anthropic, OpenAI, and Google which inform the skill's design principles.
Audit Metadata