readme-generator
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local Python script (
scripts/generate_readme.py) using theuvpackage manager to process project data and generate documentation. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted local source code files to extract project metadata (libraries, pin assignments) for documentation purposes.
- Ingestion points:
scripts/generate_readme.pyreads files ending in.inowithin the directory path provided to the--scanargument. - Boundary markers: Not applicable; the script performs static extraction of code patterns.
- Capability inventory: The script performs local file system reads of source files and writes the generated documentation to a local file (defaulting to
README.md). - Sanitization: None; extracted strings are placed directly into a markdown template, which is standard for documentation generators.
Audit Metadata