developer-docs
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external sources, including codebase exports, package manifests, and linked documentation repositories, to generate or update content.
- Ingestion points: Processes content from "linked sources" and live package implementation files (SKILL.md, WRITING-AND-PUBLISHING.md).
- Boundary markers: The instructions emphasize preserving the distinction between source code regions and generated documentation output.
- Capability inventory: The skill involves file read/write operations and the execution of documentation synchronization scripts (e.g., the
c15tsync process). - Sanitization: The skill mandates that code snippets be sourced from CI-verified regions, providing a mechanism for ensuring content integrity.
- [EXTERNAL_DOWNLOADS]: The skill references and retrieves style guides and technical rules from external GitHub repositories, including those from well-known technology organizations and independent contributors.
Audit Metadata