create-adr
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
git diffandgit logcommands to gather technical context from the repository history. These are standard, read-only operations for a development-focused documentation skill. - [INDIRECT_PROMPT_INJECTION]: The skill ingests codebase diffs and project files as sources for generating documentation. While this creates a surface for indirect prompt injection (e.g., if malicious code comments were processed), the skill's capabilities are restricted to generating documentation files, posing no significant operational risk.
Audit Metadata