readme-agents-writer
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes local shell scripts (scripts/set-doc-triplet.sh) and Python scripts (scripts/check-doc-triplets.py) to automate symlink management and document auditing. These operations are scoped to the project directory.
- [INDIRECT_PROMPT_INJECTION]: The skill includes instructions for analyzing and updating repository documentation. To mitigate risks from processing untrusted data, it enforces a 'Fact Verification' workflow that requires cross-referencing documentation claims against live code and configuration.
- [SAFE]: No malicious patterns, data exfiltration, or unauthorized privilege escalations were detected. The skill's focus is on improving the safety and reliability of agent-executable documentation.
Audit Metadata