verify-readme-features
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted data from external sources (project READMEs and codebase source files), creating a surface where malicious instructions embedded in those files could influence the agent's behavior.
- Ingestion points: The skill reads
README.md(or other documentation files) and searches through project directories such assrc/,lib/, andapp/. - Boundary markers: The instructions lack explicit boundary markers or directives to ignore instructions that might be contained within the documentation or code files being audited.
- Capability inventory: The skill utilizes file reading and search capabilities (grep/glob) to analyze the project.
- Sanitization: There is no instruction to sanitize or escape the content extracted from the documentation before it is processed by the agent.
Audit Metadata