shipping-artifacts
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill operates by having the agent read and analyze the repository's codebase to generate documentation, which creates a vulnerability surface for indirect prompt injection.
- Ingestion points: The agent is instructed to read various files including source code, configuration, and existing documentation across the repository.
- Boundary markers: The skill does not define specific delimiters or warnings to prevent the agent from being influenced by instructions embedded within the codebase being analyzed.
- Capability inventory: The skill involves reading local files and writing documentation files back to the repository.
- Sanitization: There are no specified methods for sanitizing or validating the contents of the files being read before they are processed by the agent.
Audit Metadata