create-adr
Pass
Audited by Gen Agent Trust Hub on Feb 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands including
ls,find, andmkdirto manage the ADR directory and determine the next available record number. These operations are limited to the local filesystem for document organization. - [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection (Category 8) because it processes untrusted data from external files.
- Ingestion points: In Step 1, the skill uses a
Readoperation to ingest content from a file path provided in thecontextinput. - Boundary markers: There are no explicit delimiters or instructions to the model to ignore embedded commands within the analyzed files.
- Capability inventory: The skill can read local files, list directory contents, create directories, and write new markdown files to the filesystem.
- Sanitization: No sanitization or validation is performed on the ingested file content before it is processed by the agent to extract decisions.
Audit Metadata