mcaf-adr-writing
Pass
Audited by Gen Agent Trust Hub on Jun 19, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection because it ingests and processes untrusted content from local repository files to inform its documentation output.
- Ingestion points: The workflow reads
docs/Architecture/Overview.md, feature documentation, andAGENTS.md(as specified in SKILL.md). - Boundary markers: The instructions do not specify any delimiters or warnings to the agent to ignore instructions embedded within the ingested files.
- Capability inventory: The skill is designed to perform file system write operations to create or update files in the
docs/ADR/directory. - Sanitization: No sanitization, escaping, or validation of the input file content is performed before the information is used to generate the final ADR artifacts.
Audit Metadata