skills/ronjunevaldoz/kmp-agent-skills/kotlin-multiplatform-project-docs-maintainer/Gen Agent Trust Hub
kotlin-multiplatform-project-docs-maintainer
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill contains instructions for the agent to run specific local Python scripts for repository auditing purposes, specifically scripts/scan_skill_issues.py and skills/kotlin-multiplatform-audit/scripts/audit_skills_repo.py. These scripts are intended to be part of the local project environment.
- [PROMPT_INJECTION]: Indirect Prompt Injection Surface. The skill is designed to ingest and maintain project documentation files, which represents an indirect prompt injection surface.
- Ingestion points: Project README files, onboarding guides, and source files.
- Boundary markers: No explicit markers are used to separate untrusted document content from instructions.
- Capability inventory: Shell command execution of local auditing scripts.
- Sanitization: The instructions do not specify sanitization for the content of the documentation files being processed.
Audit Metadata