contributor-guide
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is focused on generating a documentation file (CONTRIBUTING.md) based on user-provided project details. No malicious command execution, data exfiltration, or persistence mechanisms were detected.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests external project information to populate a template. While this represents a data ingestion surface, the lack of dangerous capabilities (such as shell execution or network tools) minimizes the security risk.
- Ingestion points: User-supplied information regarding project stack, setup, and workflow in SKILL.md.
- Boundary markers: Absent.
- Capability inventory: None. The skill does not invoke any external tools or scripts.
- Sanitization: Absent.
Audit Metadata