improve-agents-md

Pass

Audited by Gen Agent Trust Hub on Apr 12, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill's primary function is documentation management. It follows a controlled workflow including content classification, user preview, and confirmation before any file system write operations occur, which mitigates risk.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from local files specified by the user or found in the directory, representing a vulnerability surface.\n
  • Ingestion points: Reads content from files (e.g., AGENTS.md) provided via the $ARGUMENTS parameter or the current directory (SKILL.md).\n
  • Boundary markers: The instructions do not specify the use of delimiters or 'ignore' instructions when processing file content.\n
  • Capability inventory: Performs file system reads and writes to modify project documentation (SKILL.md).\n
  • Sanitization: No explicit sanitization or validation of the input file content is defined in the workflow beyond the 'Read and Assess' phase.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 12, 2026, 11:13 AM