gsd-docs-update
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from the project codebase to generate or update documentation, which creates a vulnerability surface where malicious instructions embedded in code comments or files could influence agent behavior.
- Ingestion points: The project codebase accessed by the subagent via tools such as Read, Glob, and Grep.
- Boundary markers: No explicit delimiters or instructions are provided to the agent to treat codebase content as untrusted data or to ignore embedded instructions.
- Capability inventory: The skill allows for significant system interaction through the
Write,Edit, andBashtools. - Sanitization: There is no evidence of sanitization or content validation for the data ingested from the codebase.
Audit Metadata