umbraco-add-document-type
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from a connected Umbraco 17+ site via MCP tools (e.g., get-all-document-types) to determine existing schema states. \n
- Ingestion points: Technical data retrieved from the Umbraco site during the 'Inspect' phase (documented in references/workflow.md). \n
- Boundary markers: No specific delimiters or instructions to ignore embedded commands within the site data are specified for the MCP tool output. \n
- Capability inventory: The skill allows the agent to generate and write markdown documentation to the local filesystem (docs/umbraco-schema/) and perform state-changing operations on the Umbraco site via MCP tools like create-document-type and update-document-type (as noted in references/workflow.md). \n
- Sanitization: The skill relies on an external linter (umbraco-content-requirements-documentation) to validate the generated requirement documents before application.
Audit Metadata