repo-doku
Pass
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands using the
Bashtool to inspect git history viagit log. This is a core part of its workflow to identify undocumented changes. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection due to its processing of untrusted repository data.
- Ingestion points: Existing documentation (
README.md),CHANGELOG.md, git commit messages, and project source code as specified in the workflow steps inSKILL.md. - Boundary markers: Absent. There are no instructions to use delimiters or guardrails to differentiate between repository data and agent instructions.
- Capability inventory: Access to
Bashfor command execution andWrite/Edittools for modifying files across the repository. - Sanitization: Absent. The skill does not perform validation or filtering of the content read from the repository before using it to generate documentation or propose actions.
Audit Metadata