grill-with-docs
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest untrusted user design plans and generate documentation, which establishes an indirect prompt injection surface due to the combined read and write capabilities.
- Ingestion points: User-provided designs and plans mentioned in the grilling process (SKILL.md).
- Boundary markers: None identified in the instruction set.
- Capability inventory: Documentation creation and file writing (ADR's and glossary).
- Sanitization: No sanitization or input validation logic is present in the skill instructions.
- [NO_CODE]: The skill consists entirely of markdown instructions and YAML configuration without any executable scripts or binaries.
Audit Metadata