read-the-damn-docs
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to have the agent ingest and act upon data from external, untrusted sources such as web search results, official product documentation, and package registry metadata.
- Ingestion points: Instructions in
references/builder-upstream.mddirect the agent to search the web for official docs, API references, migration guides, and SDK source code. - Boundary markers: There are no explicit instructions or delimiters defined to prevent the agent from following malicious instructions that might be embedded within the retrieved documentation (e.g., in HTML comments or markdown snippets).
- Capability inventory: The skill is intended to be used by an agent that typically possesses file system access and shell execution capabilities, which could be abused if the agent is manipulated by injected content.
- Sanitization: The skill does not define any sanitization or validation logic for the content retrieved from external sources.
Audit Metadata