custom-skills-doc-updater
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from local repository state, which could contain malicious instructions meant to influence the agent's behavior during documentation updates.
- Ingestion points: The skill uses
git log,git diff --stat, andgit diffto ingest data from the repository's commit history and code changes (SKILL.md). - Boundary markers: The instructions do not specify any delimiters or safety warnings to ignore instructions that might be embedded within commit messages or code diffs.
- Capability inventory: The agent has the capability to write to and modify various repository files, including
README.md,CHANGELOG.md, and configuration files likepyproject.toml,plugin.json, andpackage.json(SKILL.md). - Sanitization: There is no evidence of sanitization, escaping, or filtering of the external content retrieved from git commands before it is used to generate documentation updates.
Audit Metadata