tl-docs-create
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from the user's codebase, which could contain malicious instructions designed to influence the agent's behavior during documentation generation.
- Ingestion points: The skill reads
package.json,Gemfile,go.mod,.env.example, deployment configurations (Phase 1), and source code headers for script documentation (Phase 4). - Boundary markers: There are no explicit instructions or delimiters used when processing these external files to prevent the agent from following embedded malicious directives.
- Capability inventory: The skill possesses the ability to write multiple markdown files to the
docs/folder and execute project-specific commands likepnpm lintoragentskills validate(Phase 5). - Sanitization: The skill does not specify any sanitization, validation, or escaping of the content extracted from the codebase before it is written to the filesystem or used in verification commands.
- [COMMAND_EXECUTION]: In the Verification phase (Phase 5), the skill instructs the agent to execute local project commands, specifically
pnpm lintor other configured linting tools. While standard for documentation validation, this grants the agent authority to run shell commands in the project environment.
Audit Metadata