flutter-documentation
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes project source code and configuration files to generate documentation, which creates a surface for indirect prompt injection.
- Ingestion points: The workflow requires reading the project state from
lib/,pubspec.yaml,README.md, and thedocs/directory to ensure documentation accuracy. - Boundary markers: There are no instructions to use specific delimiters or protective prompts to prevent the agent from following instructions that might be embedded within the project files being documented.
- Capability inventory: The skill is authorized to write and update markdown files across the repository, including
README.mdand files within thedocs/folder. - Sanitization: The instructions do not include steps to sanitize or filter external project content before it is interpolated into documentation templates.
Audit Metadata