code-documenter
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes arbitrary source code, which serves as an ingestion point for potentially malicious instructions hidden in comments or string literals within the code being documented.
- Ingestion points: The skill is designed to analyze and document source code provided in the agent's context as specified in the instructions.
- Boundary markers: The instructions do not specify the use of delimiters or explicit warnings to ignore instructions embedded within the input code.
- Capability inventory: The skill itself does not request high-risk capabilities such as file-system writes, network access, or shell command execution.
- Sanitization: There is no mention of sanitizing or escaping the content found within the analyzed codebase before it is processed.
Audit Metadata