fix-ref
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external documentation files (
docs/src/content/docs/**/*.md) which constitutes an untrusted data ingestion surface. Malicious instructions embedded in the documentation could theoretically attempt to influence the agent. However, the skill's capabilities are strictly limited to reading and performing targeted text replacements within the local file system, significantly mitigating the risk. - Ingestion points: Reads content from files matching
docs/src/content/docs/**/*.md. - Boundary markers: None explicitly defined to separate documentation content from instructions.
- Capability inventory: File system read and write access to the specified documentation directory.
- Sanitization: None specified for the content read from files.
- [DATA_EXPOSURE]: The skill reads a local configuration file (
style-decisions.json.deployment.base_path) to determine the base URL for links. This is a standard practice for static site generator configuration and does not involve sensitive credentials or unauthorized access to private system files.
Audit Metadata