docs-writer
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill proposes the execution of
npm run formatto the user as a final step to ensure consistent project formatting. This is a standard development practice and is contextually relevant to the skill's purpose. - [INDIRECT_PROMPT_INJECTION]: The skill processes content by reading source code and documentation from the repository to generate or update documentation. This represents a potential vulnerability surface where content in the repository could attempt to influence the agent's output.
- Ingestion points: The skill reads files within the
packages/anddocs/directories (SKILL.md). - Boundary markers: No explicit boundary markers or instructions to ignore embedded commands are present in the skill instructions.
- Capability inventory: The skill uses
replaceandwrite_filetools and suggests the commandnpm run format(SKILL.md). - Sanitization: There is no evidence of sanitization or filtering applied to the content read from the project files.
Audit Metadata