docs-writer

Pass

Audited by Gen Agent Trust Hub on Oct 28, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external sources that may be under the control of an attacker, such as GitHub issues or community signals.
  • Ingestion points: The skill accepts Existing content (for rewrites) and Context (community signals, GitHub issues) as inputs in the Inputs section of SKILL.md.
  • Boundary markers: There are no explicit instructions to treat these inputs as data or to ignore any embedded instructions within them.
  • Capability inventory: The skill has the capability to write files to the repository and invoke other automated tools, specifically the docs-diagrams and docs-reviewer skills.
  • Sanitization: No sanitization or validation of the input content is performed before it is used to guide the drafting process.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 28, 2026, 01:54 PM