skills/trancee/skills/diataxis/Gen Agent Trust Hub

diataxis

Pass

Audited by Gen Agent Trust Hub on Aug 31, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to audit and restructure documentation projects, requiring it to ingest and process external Markdown files that may contain adversarial instructions. * Ingestion points: The agent reads project documentation files, and the local scripts/check-links.py script parses their content for link validation. * Boundary markers: Absent; the instructions do not specify delimiters or guidelines for the agent to ignore instructions embedded within the processed documentation. * Capability inventory: The skill has the capability to read and write files and execute local scripts via the shell. * Sanitization: Absent; there is no evidence of filtering or validation of the ingested content to prevent instruction leakage.
  • [COMMAND_EXECUTION]: The skill includes and executes a local Python script (scripts/check-links.py) to perform project-wide link and anchor validation, which involves recursive file system access within the target directory.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 31, 2026, 10:47 AM
Security Audit — agent-trust-hub — diataxis