memory
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function involves reading and synthesizing information from various project files (such as READMEs and source code). This represents an attack surface where malicious instructions embedded in project files could potentially influence the agent's behavior during documentation updates.
- Ingestion points: Project root files, architecture documentation, and user-provided sources as defined in the
InitializeandIngestsections ofSKILL.md. - Boundary markers: The skill does not define specific delimiters to separate ingested content from the agent's internal instructions.
- Capability inventory: The skill's capabilities are restricted to reading project files and writing Markdown-formatted documentation to the filesystem.
- Sanitization: There are no explicit instructions for sanitizing external content before it is incorporated into the persistent memory.
Audit Metadata