readme-generator
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it is designed to ingest and process untrusted data from a repository's codebase.
- Ingestion points: The skill scans manifests, scripts, tests, type definitions, and entry points within the repository (
SKILL.md). - Boundary markers: There are no explicit instructions to use delimiters or ignore instructions that may be embedded within the files being scanned.
- Capability inventory: The skill is configured with
sandbox_mode: workspace-write, allowing it to write generated content back to the project files. - Sanitization: The instructions do not define specific sanitization or filtering logic for the data extracted from the source files.
Audit Metadata