llms-txt

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill's primary function is to analyze existing documentation (READMEs, API specs, guides) within a local repository to produce a curated map for AI answer engines. This process follows established best practices for project discoverability.
  • [INDIRECT_PROMPT_INJECTION]: The skill possesses a potential attack surface for indirect prompt injection as it ingests untrusted data from the analyzed repository. However, the risk is minimal given the skill's specific purpose of summarizing documentation rather than executing content.
  • Ingestion points: The skill scans numerous file types including README.md, content in the docs/ directory, OpenAPI specifications, and other repository metadata as described in Step 1 of the procedure in SKILL.md.
  • Boundary markers: The instructions do not specify explicit boundary markers or directives to ignore embedded instructions within the source files during the scanning process.
  • Capability inventory: The skill is capable of writing generated files (llms.txt and llms-full.txt) to the repository root, as outlined in Step 7 of SKILL.md.
  • Sanitization: The instructions do not include specific sanitization or escaping protocols for the content extracted from repository files before it is included in the final generated output.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 08:54 PM
Security Audit — agent-trust-hub — llms-txt