api-docs-generator
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill scans and processes local project files which serves as a potential attack surface for indirect prompt injection if the source files contain malicious instructions.
- Ingestion points: The skill is instructed to scan all
route.tsfiles within theapp/api/directory and extract handlers, types, and schemas. - Boundary markers: There are no instructions for the agent to use specific delimiters or to ignore potential instructions embedded within the code comments, documentation strings, or metadata of the files being scanned.
- Capability inventory: The skill possesses the capability to read local source code and generate structured documentation based on that content.
- Sanitization: The instructions do not define any sanitization, filtering, or validation logic for the content extracted from the source files before it is processed by the agent to generate the final OpenAPI specification.
Audit Metadata