github-readme-generator
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill automatically analyzes project structures and configuration files to populate README templates. This ingestion of local project data is the primary intended function of the skill and does not represent a malicious exploit.\n
- Ingestion points: Local project files, directory structures, and configuration metadata (e.g., package.json, go.mod) analyzed during the 'auto-generate' process.\n
- Boundary markers: Not explicitly defined within the skill instructions; relies on the agent's platform-level context management.\n
- Capability inventory: The skill is designed to read file system metadata and generate markdown documentation output.\n
- Sanitization: Content is processed and formatted by the language model, which applies standard safety and output filters.\n- [EXTERNAL_DOWNLOADS]: The skill references image assets and QR codes hosted on Tencent Cloud COS (myqcloud.com) for author contact and documentation visuals. Tencent Cloud is a well-known service provider, and these references are used appropriately for the skill's purpose.
Audit Metadata