usage-guidelines
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists entirely of instructional markdown and YAML frontmatter. It does not execute scripts, download external binaries, or request dangerous permissions. The use of relative paths in the references section is restricted to local knowledge notes.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process user-supplied component information and existing documentation to generate guidelines, which establishes a potential surface for indirect prompt injection. 1. Ingestion points: Step 1 (Gather component name, system information, existing documentation, and misuse patterns). 2. Boundary markers: Absent; there are no specific instructions for the agent to treat external documentation as untrusted data or to use delimiters. 3. Capability inventory: The skill's primary function is text generation; it does not utilize file-write, network, or subprocess capabilities. 4. Sanitization: Absent.
Audit Metadata