reverse-document
Pass
Audited by Gen Agent Trust Hub on Mar 28, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection attacks because it ingests untrusted content from local source files.
- Ingestion points: The skill reads files and directories specified by the user in the
<path>argument using theReadandBashtools. - Boundary markers: There are no explicit boundary markers or instructions telling the agent to ignore natural language instructions that might be embedded in code comments or string literals within the analyzed files.
- Capability inventory: The skill has access to powerful tools including
Bash,Write, andEdit, which could be abused if the agent's logic is subverted by malicious input. - Sanitization: No sanitization or filtering is performed on the data read from the filesystem before it is processed by the AI.
Audit Metadata