agents-md
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill identifies a workflow where the agent ingests untrusted project data to generate instructions, creating a surface for indirect prompt injection.\n
- Ingestion points: The process involves reading various project files including README, product vision, glossary, ADRs, contributor guidance, configuration, and source code (SKILL.md, Step 2).\n
- Boundary markers: There are no specified boundary markers or instructions to ignore embedded commands within the analyzed project files.\n
- Capability inventory: The skill has the capability to write and update project files, such as AGENTS.md (SKILL.md, Step 8).\n
- Sanitization: No sanitization or validation steps are defined for the data extracted from external project files before it is used in documentation.
Audit Metadata