diataxis
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to audit and restructure documentation projects, requiring it to ingest and process external Markdown files that may contain adversarial instructions. * Ingestion points: The agent reads project documentation files, and the local
scripts/check-links.pyscript parses their content for link validation. * Boundary markers: Absent; the instructions do not specify delimiters or guidelines for the agent to ignore instructions embedded within the processed documentation. * Capability inventory: The skill has the capability to read and write files and execute local scripts via the shell. * Sanitization: Absent; there is no evidence of filtering or validation of the ingested content to prevent instruction leakage. - [COMMAND_EXECUTION]: The skill includes and executes a local Python script (
scripts/check-links.py) to perform project-wide link and anchor validation, which involves recursive file system access within the target directory.
Audit Metadata