design
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill defines a clear, procedural workflow for creating technical documentation. No malicious patterns such as obfuscation, credential harvesting, or unauthorized remote execution were detected.
- [INDIRECT_PROMPT_INJECTION]: The skill contains an attack surface for indirect prompt injection as it ingests untrusted data to produce output, though the risk is minimal given the intended documentation purpose.
- Ingestion points: The workflow instructs the agent to read repository instructions, relevant code, and linked materials (Workflow Step 1).
- Boundary markers: There are no explicit instructions or delimiters provided to the agent to distinguish between its primary instructions and potentially malicious instructions embedded in the source material.
- Capability inventory: The skill allows the agent to write files to the local filesystem (
docs/<feature-slug>/design.md). - Sanitization: No sanitization or validation steps are defined for the content extracted from external sources before it is written to the design document.
Audit Metadata