project-discover-modules-contracts
Pass
Audited by Gen Agent Trust Hub on Jul 28, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes project source files to generate documentation, creating a surface for indirect prompt injection where malicious content in source code could influence the agent's summary or behavior. \n
- Ingestion points: Source files listed in the
source_filesmetadata of the generated markdown files. \n - Boundary markers: The skill does not provide specific instructions or delimiters to isolate untrusted code content from the agent's instructional context. \n
- Capability inventory: The agent reads source files and writes structured markdown documentation to the
.aidlc/project/components/directory. \n - Sanitization: No content sanitization or validation mechanisms are defined for the ingested data.
Audit Metadata