grill-with-docs
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from the local repository (source code and existing documentation) to facilitate its analysis. It has the capability to write to local documentation files.
- Ingestion points: Repository source code and documentation files (
SKILL.md). - Boundary markers: The instructions do not define explicit delimiters for separating ingested code from the agent's internal reasoning.
- Capability inventory: The skill is authorized to create and modify
CONTEXT.mdand files within thedocs/adr/directory (SKILL.md). - Sanitization: No specific sanitization or escaping logic is prescribed for the ingested content.
- [EXTERNAL_DOWNLOADS]: The skill identifies the
grillinganddomain-modelingskills as dependencies. However, it explicitly mandates the use of repository-owned versions and strictly forbids fetching or substituting skills from external sources (SKILL.md).
Audit Metadata