docs-writer
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external sources that may be under the control of an attacker, such as GitHub issues or community signals.
- Ingestion points: The skill accepts
Existing content(for rewrites) andContext(community signals, GitHub issues) as inputs in theInputssection ofSKILL.md. - Boundary markers: There are no explicit instructions to treat these inputs as data or to ignore any embedded instructions within them.
- Capability inventory: The skill has the capability to write files to the repository and invoke other automated tools, specifically the
docs-diagramsanddocs-reviewerskills. - Sanitization: No sanitization or validation of the input content is performed before it is used to guide the drafting process.
Audit Metadata