project-context-bootstrap
Pass
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: SAFEPROMPT_INJECTIONNO_CODE
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection attack surface due to its core function of reading and processing untrusted project data.
- Ingestion points: In
SKILL.md(Workflow Steps 1 and 2), the agent is instructed to read project manifests, lockfiles, and existing repository documentation. - Boundary markers: No delimiters or instructions are provided to help the agent distinguish between its own operational instructions and potentially malicious content within the analyzed files.
- Capability inventory: The skill is limited to documentation generation and does not define tools for network access or shell execution, which significantly limits the impact of potential injection.
- Sanitization: There are no instructions or mechanisms for sanitizing the ingested text before it is processed by the agent.
- [NO_CODE]: The skill does not contain any executable scripts, binaries, or source code; it consists entirely of markdown instructions and YAML configuration.
Audit Metadata