diataxis-organize-docs
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external, potentially untrusted documentation files, creating a surface where embedded malicious instructions could influence agent behavior.
- Ingestion points: The skill instructs the agent to "Scan the documentation directory and classify each file or section" in Step 1 of SKILL.md.
- Boundary markers: The instructions do not provide specific delimiters (such as XML tags or unique triple-quotes) or explicit "ignore embedded instructions" warnings to separate the skill's instructions from the content being analyzed.
- Capability inventory: The skill's YAML frontmatter explicitly allows the use of the
ReadandWritetools, providing the necessary capabilities to modify the file system based on processed data. - Sanitization: There are no instructions for sanitizing, escaping, or validating the content extracted from the documentation before it is processed by the agent.
Audit Metadata