rspress-description-generator
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from Markdown and MDX files to generate documentation descriptions. This creates a surface for indirect prompt injection where malicious instructions embedded in documents could influence the agent's output.
- Ingestion points: Markdown and MDX files located in the documentation root as specified in the processing instructions.
- Boundary markers: Absent; the instructions do not provide delimiters or warnings for the agent to ignore instructions embedded within the processed content.
- Capability inventory: File system access for reading document body content and writing updated frontmatter back to the files.
- Sanitization: Absent; the skill does not specify any validation, filtering, or escaping of the ingested document content.
Audit Metadata