docs-diagram
Pass
Audited by Gen Agent Trust Hub on May 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands like
findandwcto verify the existence of files and count components within the local codebase during its analysis phase. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it ingests untrusted data from the codebase being analyzed.
- Ingestion points: The skill reads source files, configurations, and directory structures across the codebase to identify components.
- Boundary markers: There are no explicit delimiters or instructions to ignore embedded commands within the processed files.
- Capability inventory: The skill can spawn parallel Explore agents, execute shell search commands, and write files to the
docs/directory. - Sanitization: There is no evidence of sanitization or filtering of the content extracted from the codebase before it is used to generate diagrams and documentation.
Audit Metadata