promptbook-doctor
Pass
Audited by Gen Agent Trust Hub on Jul 4, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted markdown and YAML data from the project's prompts directory. This creates a surface where instructions embedded within prompt fragments could theoretically influence the agent's behavior during the audit. The skill mitigates this by providing findings to the user for manual review and approval rather than executing automated changes.
- [COMMAND_EXECUTION]: The skill uses local CLI tools such as
promptbook,wc,diff, andrgto perform structural and semantic analysis of the codebase. These commands are typical for development workflows and are scoped to the project's local files.
Audit Metadata