create-runbook
Pass
Audited by Gen Agent Trust Hub on Apr 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a set of instructions and templates for generating documentation based on previous investigation steps. No malicious commands, unauthorized file access, or network exfiltration patterns were identified within the skill body or metadata.\n- [PROMPT_INJECTION]: The skill contains an indirect prompt injection surface as it is designed to ingest and process untrusted conversation history to generate persistent files.\n
- Ingestion points: The entire conversation history serves as input data (SKILL.md).\n
- Boundary markers: The instructions lack explicit delimiters or guidance to ignore embedded instructions within the conversation data.\n
- Capability inventory: The skill specifies writing markdown files to the local
runbooks/directory (SKILL.md).\n - Sanitization: There is no requirement for sanitization or validation of the extracted content before writing it to the file system.
Audit Metadata