backend-docs
Pass
Audited by Gen Agent Trust Hub on Jul 4, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes project-specific files and instructions to gather documentation context, creating a potential indirect prompt injection surface. The analysis of this surface includes:
- Ingestion points: Reads files such as
AGENTS.md,.cursor/rules/, and project source code as specified inreferences/discovery-workflow.md. - Boundary markers: No explicit instructions to ignore embedded prompts are present, though the workflow uses predefined templates to structure the output.
- Capability inventory: The skill is limited to reading local files and writing documentation files; no network or subprocess execution capabilities are used.
- Sanitization: There is no mention of sanitization or escaping for the ingested content.
Audit Metadata