lov-architecture-documentation
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data in the form of project source code, manifests, and API schemas to generate documentation, creating a surface for indirect prompt injection.
- Ingestion points: The skill reads project source code, manifests, service configurations, and API definitions (referenced in SKILL.md Workflow Step 1).
- Boundary markers: The instructions do not specify explicit delimiters or "ignore embedded instructions" warnings for the processed source code content.
- Capability inventory: The skill has the ability to read project files, write documentation artifacts, and interact with the local profile store via a Python script.
- Sanitization: No explicit sanitization or validation of the content within the ingested source code is described in the workflow.
Audit Metadata