project-map-builder
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill analyzes external project files and directory structures to generate documentation summaries. This data ingestion creates a vector for indirect prompt injection, where an attacker could place malicious instructions inside source code or configuration files to manipulate the agent's output or actions.
- Ingestion points: The skill reads file lists and the content of 'key files' (e.g., entry points, manifests, configs) within the user-specified project directories as described in the workflow section of
SKILL.md. - Boundary markers: There are no explicit instructions or delimiters defined to isolate the content of the analyzed files from the agent's core processing logic, nor are there instructions to ignore directives found within those files.
- Capability inventory: The skill relies on file system tools like
ripgrep(rg --files) or PowerShell (Get-ChildItem) to list files, and it writes to the file system to create or updatePROJECT_MAP.mdfiles. - Sanitization: The instructions do not specify any mechanisms for sanitizing or escaping content read from files before it is interpolated into the agent's context for summarization.
Audit Metadata