project-init
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from local repository files, such as READMEs and existing agent instructions, to preserve developer-authored content during the initialization process.
- Ingestion points:
scripts/bootstrap.pyreads existing content fromAGENTS.md,CLAUDE.md, and other project files via theprepare_mergedfunction. - Boundary markers: The skill employs explicit HTML comment markers (e.g.,
<!-- light-project:managed:start -->) to define the boundaries of managed content blocks. - Capability inventory: The skill is capable of reading from and writing to specific markdown files within the target project root, facilitating the setup of project contracts.
- Sanitization: The
validate_render_textfunction inscripts/bootstrap.pyproactively validates all user-provided or extracted text to ensure it does not contain newlines or management markers, effectively preventing content from breaking out of its designated block or corrupting the configuration schema.
Audit Metadata