check-refs
Pass
Audited by Gen Agent Trust Hub on Mar 19, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious code, hardcoded credentials, or unauthorized network operations were detected. The skill functions as a local documentation linter and validator.\n- [PROMPT_INJECTION]: The skill is subject to an indirect prompt injection surface because it processes untrusted markdown content.\n
- Ingestion points: Scans all markdown files in the
docs/directory using theGlobandReadtools (SKILL.md).\n - Boundary markers: Absent; file content is parsed for links and frontmatter without using delimiters to isolate data from instructions.\n
- Capability inventory: The skill uses the
Edittool to modify frontmatter andAskUserQuestionfor user interaction (SKILL.md).\n - Sanitization: No filtering or sanitization is performed on the ingested markdown content before it is processed by the agent.
Audit Metadata