init-docs
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
mkdir -pto recursively create a predefined directory tree for documentation (e.g.,docs/specs,docs/standards). This is a standard and expected operation for a project initialization tool. - [INDIRECT_PROMPT_INJECTION]: The skill populates a
CLAUDE.mdfile, which is a known mechanism for influencing AI agent behavior within a workspace. While this creates an attack surface, the provided template content (templates/standards-claude.md) is limited to architectural standards and documentation naming conventions. - Ingestion points: Reads from the local
templates/standards-claude.mdfile within the skill's package. - Boundary markers: None present in the output file, though the content is descriptive documentation rather than executable instructions.
- Capability inventory: Limited to
mkdir(directory creation) and file write operations on the local file system. - Sanitization: The skill performs an idempotent check, ensuring it does not overwrite existing user modifications to the
CLAUDE.mdfile.
Audit Metadata