manage-codebase-rebuild
Pass
Audited by Gen Agent Trust Hub on Apr 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the Bash tool to manage file system operations, including creating session folders and preparing the output directory structure for generated documentation.
- [PROMPT_INJECTION]: The skill possesses an indirect prompt injection attack surface as it ingests and processes content from the local codebase to generate documentation. 1. Ingestion points: Source directories (src/, lib/, app/, packages/) and specification files in .workflow/task-specs/. 2. Boundary markers: No explicit boundary markers or instructions to ignore embedded commands are present in the documentation generator task definitions. 3. Capability inventory: The skill has access to Bash, Write, and the ability to spawn multiple parallel agents with varying instructions. 4. Sanitization: There is no evidence of sanitization or filtering of the scanned codebase content before it is processed by the documentation agents.
Audit Metadata