code-exemplars-blueprint-generator
Pass
Audited by Gen Agent Trust Hub on Feb 25, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill acts as a template for documentation purposes. It does not execute external scripts, perform network requests, or access sensitive user credentials.
- [PROMPT_INJECTION]: The prompt instructions involve scanning a codebase, which creates an indirect prompt injection surface where instructions embedded in the code could potentially influence the agent. However, the risk is minimal as the agent's actions are restricted to generating a markdown file.
- Ingestion points: The agent scans source code and configuration files within the repository.
- Boundary markers: There are no specific instructions or delimiters used to tell the agent to ignore instructions found within the scanned files.
- Capability inventory: The agent is tasked with creating an 'exemplars.md' file; no other system write or network capabilities are requested.
- Sanitization: The skill does not provide mechanisms to sanitize or validate the content extracted from the codebase before it is used to generate the document.
Audit Metadata