write-readme
Pass
Audited by Gen Agent Trust Hub on Jun 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill functions as a structured template engine for project documentation. It follows a controlled workflow to gather project details, apply styling from
REFERENCE.md, and populatetemplates/README.template.md. - [EXTERNAL_DOWNLOADS]: The skill contains numerous references to well-known technology services and public registries, including GitHub, npm, Packagist, Shields.io, and skills.sh. These are used solely for generating standard status badges and repository links in the output README, which is a common and safe practice.
- [DATA_EXPOSURE]: Analysis of the instructions and templates confirms no access to sensitive environment variables, credentials, or private file paths.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted user input such as project names and code snippets to fill the README template. While this constitutes an attack surface, the skill lacks dangerous capabilities (such as arbitrary code execution or network exfiltration) that would allow for exploitation. The use of clear placeholders in the template serves as a structural boundary.
Audit Metadata