crafting-effective-readmes
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is entirely focused on content generation and documentation guidance. It contains no executable scripts, shell commands, or network operations.
- [SAFE]: External links and references within the skill point to reputable open-source community resources, such as the Standard README specification, Shields.io, and the Art of README project.
- [SAFE]: Project templates for internal tools correctly use placeholders (e.g.,
[API_KEY],[1Password/Vault/etc]) for sensitive configuration, encouraging users to follow secure credential management practices rather than hardcoding secrets. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process user-provided project details to generate documentation. While this creates a theoretical surface for indirect prompt injection, the risk is negligible as the skill execution environment lacks network tools or high-privilege commands that could be exploited by a malicious input.
Audit Metadata