documentation-update
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The documentation update workflow requires the agent to ingest and process various external source documents (PRDs, specs, design notes) to determine documentation content. Malicious instructions in these sources could influence the agent's behavior during file-writing operations.
- Ingestion points:
references/current-guidance.md(Step 3) specifies reading multiple external source document types. - Boundary markers: Absent; no instructions are provided to delimit or ignore instructions within the source data.
- Capability inventory: The skill employs file-writing capabilities to modify and create documentation artifacts.
- Sanitization: Absent; no validation or sanitization steps are defined for content extracted from source documents.
Audit Metadata