update-docs
Pass
Audited by Gen Agent Trust Hub on May 5, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill uses standard version control and file system utilities such as
git diff,git log, andfindto identify code changes and locate documentation files. These operations are appropriate for the skill's stated purpose. - [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface because it ingests and processes data from external files that could contain malicious instructions.
- Ingestion points: Reads existing documentation files (Step 4) and evaluates source code diffs (Step 3) to determine necessary updates.
- Boundary markers: Absent. The instructions do not define delimiters or provide specific prompts to the agent to ignore or isolate instructions that may be embedded in the analyzed code or documentation.
- Capability inventory: The skill has the ability to execute shell commands via
Bash(used for git operations) and modify files viaWriteandEdittools. - Sanitization: Absent. The skill analyzes the content of files and diffs directly without a sanitization or filtering layer before interpretation.
Audit Metadata