reverse-document
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill analyzes implementation code and prototypes which serve as a potential surface for indirect prompt injection.
- Ingestion points: The skill uses
Read,Glob, andGreptools to ingest data from user-defined file paths inSKILL.md(Phase 2). - Boundary markers: The skill does not define specific delimiters for separating code content from instructions, but the workflow requires a mandatory questioning phase (Phase 3) and a findings presentation phase (Phase 4) to verify intent.
- Capability inventory: The skill possesses
Write,Edit, andBashcapabilities across all scripts. - Sanitization: No programmatic sanitization is defined for external code content, but the "Collaborative Protocol" ensures that a human must review and approve the generated draft before the
Writetool is invoked (Phase 6). - [COMMAND_EXECUTION]: The skill requests access to the
Bashtool. - Evidence:
allowed-tools: Bashis declared in the frontmatter ofSKILL.md. - Context: The tool is utilized for analysis and project exploration. The skill's instructions guide the agent toward collaborative documentation rather than autonomous system modification.
Audit Metadata