code-with-docs
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes project-specific documentation and configuration files which could contain instructions designed to influence the agent's behavior.
- Ingestion points: Project configuration files (
AGENTS.md,CLAUDE.md), requirement documents (docs/prd/), development plans (docs/plans/), and project source code (README, package manifests, etc.). - Boundary markers: Absent. The instructions do not define specific delimiters or warnings for the agent to ignore embedded instructions within the project files it reads.
- Capability inventory: The skill utilizes file system read and write operations to manage documentation and implement code.
- Sanitization: Absent.
Audit Metadata