superior-docs
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill analyzes a wide array of repository files, including source code, configuration files, and scripts, to generate documentation. This creates an ingestion surface where malicious instructions embedded in these files could potentially influence the agent's behavior. \n
- Ingestion points: The skill instructs the agent to inspect code paths, configuration, tests, scripts, and deployment files (SKILL.md, references/automatic-change-recording.md). \n
- Boundary markers: There are no explicit instructions or delimiters provided to help the agent distinguish between its own instructions and potentially malicious instructions within the data it processes. \n
- Capability inventory: The skill utilizes file-read and file-write operations and mentions "safe execution" of commands for verification purposes (SKILL.md). \n
- Sanitization: Although the skill mandates checking for secrets and credentials, it lacks specific requirements for sanitizing or escaping the content read from files before it is processed or incorporated into documentation.
Audit Metadata