describe-design

Pass

Audited by Gen Agent Trust Hub on Oct 7, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious patterns, obfuscation, or unauthorized network operations were detected in the instructions.
  • [SAFE]: The skill incorporates human-in-the-loop safety measures, explicitly requiring user confirmation for the file output location before any write operation is performed.
  • [SAFE]: The 'Writing Guidelines' specifically instruct the agent to avoid copying source code directly into documentation. This is a security best practice that prevents the reflection of potentially malicious or confusing payloads from an untrusted codebase into the generated documentation.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external data (codebase files), which creates a potential surface for indirect prompt injection. However, the instructions to prioritize description over verbatim copying and the requirement for user review of the draft and final location effectively mitigate this risk to a safe level.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 7, 2026, 04:51 PM