ensure-agents-md
Pass
Audited by Gen Agent Trust Hub on Apr 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary function is to generate local documentation files based on project analysis. No malicious behaviors were detected.
- [COMMAND_EXECUTION]: The skill instructs the agent to perform local file system operations, including reading project metadata (pom.xml, package.json) and writing documentation files (AGENTS.md, CLAUDE.md) to the workspace root. These actions are restricted to the local environment and match the skill's documented intent.
- [PROMPT_INJECTION]: The skill uses explicit instructions to prioritize its execution (e.g., "Run FIRST") and enforce a mandatory workflow when project documentation is missing. These are functional directives for project initialization rather than attempts to bypass security or safety guidelines.
- [EXTERNAL_DOWNLOADS]: The skill refers to official Adobe documentation, well-known Apache projects, and official GitHub repositories. These are informational links for the developer/agent and do not involve automated script downloads or remote code execution.
Audit Metadata