z-creating-flow-doc
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to analyze untrusted data from the local project environment, which could potentially contain malicious instructions intended to influence the agent's output.
- Ingestion points: The instructions direct the agent to "Read the local conventions and one or two existing flows" and "Inspect the implementation and tests" (found in SKILL.md).
- Boundary markers: The skill does not define specific delimiters or instructions to ignore embedded prompts within the files being analyzed.
- Capability inventory: The agent uses file system read capabilities to analyze code and write capabilities to create new documentation files in
docs/{domain}/flows/. - Sanitization: There is no evidence of sanitization or validation of the content extracted from the code or existing documentation before it is processed by the agent.
Audit Metadata