brownfield-reverse-specifier
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingest data from untrusted external codebases to generate documentation, which creates a surface for indirect prompt injection if the analyzed files contain malicious instructions.
- Ingestion points: Repository manifests (
package.json,pyproject.toml,Dockerfile,.env.example), directory tree, database schema/migration files, route controllers, auth middleware, and UI components. - Boundary markers: The instructions do not specify the use of delimiters or boundary markers when interpolating codebase content into the agent's context.
- Capability inventory: The skill has the capability to read local files and write new markdown files to a
specs/directory. - Sanitization: No explicit sanitization or filtering of the ingested codebase content is mentioned before it is processed by the agent.
Audit Metadata