readme-generator
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes project-specific data provided by users to generate documentation.
- Ingestion points: Project descriptions, features, and setup instructions provided by the user to the agent.
- Boundary markers: The skill does not define specific delimiters to isolate untrusted user data from the generation instructions.
- Capability inventory: The skill is intended for text generation and does not request or use high-privilege tools like network access or file system modification.
- Sanitization: No explicit data sanitization or validation is applied to the project metadata provided by the user.
- [SAFE]: The skill contains no executable code or malicious commands. All provided URLs and shell examples (e.g.,
npm install,git clone) refer to well-known, trusted platforms (GitHub, npm, Shields.io) or serve as obvious placeholders for the user's project documentation.
Audit Metadata