rspress-description-generator

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from Markdown and MDX files to generate documentation descriptions. This creates a surface for indirect prompt injection where malicious instructions embedded in documents could influence the agent's output.
  • Ingestion points: Markdown and MDX files located in the documentation root as specified in the processing instructions.
  • Boundary markers: Absent; the instructions do not provide delimiters or warnings for the agent to ignore instructions embedded within the processed content.
  • Capability inventory: File system access for reading document body content and writing updated frontmatter back to the files.
  • Sanitization: Absent; the skill does not specify any validation, filtering, or escaping of the ingested document content.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 02:41 PM
Security Audit — agent-trust-hub — rspress-description-generator