zh-docgen
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted external data from a project's codebase to generate technical documentation, creating a surface for indirect prompt injection.
- Ingestion points: The skill reads
README,package.json,pyproject.toml, and source code files (functions, classes, docstrings) as primary input for documentation generation. - Boundary markers: There are no instructions providing delimiters or warnings to the agent to ignore embedded instructions within the project files being analyzed.
- Capability inventory: The skill uses file reading capabilities to scan the repository and file writing capabilities to output Markdown documentation.
- Sanitization: The skill does not define any sanitization, validation, or escaping procedures for the content extracted from the code or metadata files.
Audit Metadata