x9-context-files-generator
Pass
Audited by Gen Agent Trust Hub on Jul 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute commands found within the target repository's manifests, scripts, CI configurations, and documentation to verify their functionality.
- [PROMPT_INJECTION]: The skill presents an attack surface for indirect prompt injection by processing untrusted data from repository files.
- Ingestion points: The workflow involves reading and merging content from
README.md,AGENTS.md,CLAUDE.md, and other repository files. - Boundary markers: There are no explicit delimiters or instructions provided to the agent to ignore embedded instructions within the ingested repository data.
- Capability inventory: The agent has the capability to write to the local filesystem (updating documentation files) and execute shell commands found in the repository.
- Sanitization: The instructions do not include any steps for sanitizing, validating, or escaping content read from the repository before it is processed or used in commands.
- [SAFE]: The skill references research findings from ArXiv, a well-known scientific repository, to guide its decision-making process.
Audit Metadata