documentation-guidelines
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructions require the agent to process untrusted content from the repository (source code, tests, documentation) which could contain hidden malicious instructions.
- Ingestion points: The agent is directed to read documentation indexes, source files, tests, schemas, and configuration files as described in SKILL.md and references/audit-cleanup.md.
- Boundary markers: There are no instructions to use delimiters or ignore embedded instructions when reading these files.
- Capability inventory: The skill utilizes reading files, writing markdown updates, and executing search/audit commands such as rg (ripgrep) and git diff.
- Sanitization: The instructions do not define any sanitization or validation processes for the ingested content.
Audit Metadata