docs-update-from-diff
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses git status and git diff commands to inspect the local repository state. This access is required to identify which features or behaviors have changed in the code to properly update the documentation.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes content from git diff output, which is an external data source that could contain malicious instructions embedded in code comments or string literals. These instructions could potentially influence the agent's output or documentation edits.\n
- Ingestion points: git diff output and code content from the local repository (SKILL.md, Step 1).\n
- Boundary markers: The skill lacks explicit boundary markers or instructions to the AI to ignore natural language instructions that might be present within the diff content.\n
- Capability inventory: The skill has permissions to write to documentation files in docs/, navigation files (_meta.ts), and other agent skill files (packages/core/src/skills/bundled/qc-helper/SKILL.md).\n
- Sanitization: No specific sanitization or filtering logic is described for the content derived from code diffs before it is written to the destination files.
Audit Metadata