custom-skills-doc-updater
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard command-line utilities such as
git log,git diff,find, andgrepto analyze repository history and locate documentation files. These tools are used appropriately according to their intended purpose for documentation management. - [INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it ingests and processes untrusted data from repository history and file contents. 1. Ingestion points: Data is collected from git commit messages via
git logand from repository file content viagrepandfind. 2. Boundary markers: The skill does not define specific delimiters or instructions to prevent the agent from obeying instructions embedded in the analyzed data. 3. Capability inventory: The skill has capabilities for shell command execution and file system operations. 4. Sanitization: There are no explicit instructions for sanitizing or escaping the data retrieved from the repository before it is processed by the agent.
Audit Metadata