bootstrap-agents-md
Pass
Audited by Gen Agent Trust Hub on Aug 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes shell commands to establish symlinks and verify the integrity of the generated documentation. * Evidence: The agent is instructed to use
ln -sf AGENTS.md CLAUDE.mdfor symlinking andcat CLAUDE.mdfor verification inSKILL.md. * Evidence: The verification pass requires the agent to execute existing project scripts (e.g., frompackage.json) to confirm they function as documented. * Evidence: Portable skill templates included in the references (skill-code-review.md) utilize standard commands such asgit diff,git show, andgh prfor context gathering. - [PROMPT_INJECTION]: The skill processes untrusted repository files to generate its documentation, creating an indirect prompt injection surface. * Ingestion points: Local files including
package.json, lockfiles, CI configuration files (.github/workflows/), and existing documentation (README.md). * Boundary markers: Absent; the skill lacks specific delimiters or instructions for the agent to ignore embedded commands within the ingested project files. * Capability inventory: The agent has the capacity to write files to the local file system, create symlinks, and execute project-defined shell scripts. * Sanitization: There is no requirement for the agent to sanitize or escape data gathered from repository files before using it in documentation generation or command execution.
Audit Metadata