antv-skills-maintainer

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes content from SKILL.md files located in the skills/ directory and interpolates this data into README.md and .claude-plugin/marketplace.json.
  • Ingestion points: Reads name and description frontmatter from all files matching skills/*/SKILL.md.
  • Boundary markers: The instructions do not define delimiters or specific boundary markers for the data being interpolated into the target files.
  • Capability inventory: The skill performs local file system read and write operations.
  • Sanitization: There are no instructions for sanitizing, escaping, or validating the strings retrieved from external skills before they are written to central configuration and documentation files.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 08:39 AM