llms-txt
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted project data to generate summaries, creating a potential surface for indirect prompt injection where malicious content in READMEs or source code could attempt to influence agent behavior during analysis.
- Ingestion points: Project files including READMEs, documentation directories (
docs/,wiki/), API documentation, configuration files, and source code entry points as defined inSKILL.md. - Boundary markers: Absent; the instructions do not include specific delimiters or instructions to ignore commands embedded within the project files being analyzed.
- Capability inventory: The skill uses
Glob,Grep, andReadfor file analysis and has the capability to write the resultingllms.txtfile to the project root. - Sanitization: No explicit sanitization or filtering of ingested file content is specified before the content is processed for summary generation.
- [COMMAND_EXECUTION]: The skill utilizes file system traversal and search tools (
Glob,Grep,Read) to inspect the project environment. This is the primary and intended functionality for identifying relevant documentation and source files to include in the generated output.
Audit Metadata