docs-discovery
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and summarize documentation content retrieved from external sources, creating an attack surface for indirect prompt injection.
- Ingestion points: The skill retrieves documentation content through the
WebFetchtool and themcp__context7__get-library-docstool as defined inSKILL.md. - Boundary markers: The prompt instructions do not include specific delimiters or directives to the agent to treat external content as untrusted or to ignore instructions contained within the fetched markdown/text files.
- Capability inventory: The skill possesses network access capabilities via
WebSearchandWebFetchand uses Model Context Protocol (MCP) tools to interact with the context7 API. - Sanitization: The instructions do not specify any validation or sanitization of the retrieved content before it is presented to the user or processed by the agent's reasoning engine.
Audit Metadata