grill-with-docs
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external, potentially untrusted data from the codebase, project documentation (PRD, README), and issue trackers to drive its reasoning and update documentation files.
- Ingestion points: Codebase files,
CONTEXT.md,ADRs,PRD, project tickets, andREADME. - Boundary markers: The instructions do not specify the use of delimiters or "ignore instructions" blocks when processing this external data.
- Capability inventory: The skill utilizes file reading/writing, directory traversal, and external issue tracking updates.
- Sanitization: There are no explicit sanitization or validation steps mentioned for the content retrieved from external files or tickets before it is used to update other artifacts.
- [EXTERNAL_DOWNLOADS]: Interacts with Linear to update project issues as part of its documented workflow for tracking decisions and implementation implications.
Audit Metadata