blueprint-curate-docs
Pass
Audited by Gen Agent Trust Hub on Mar 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes bash commands for project introspection and metadata management. It uses
findandlsto locate documentation files in thedocs/blueprint/directory,grepto check dependency versions and search thesrc/directory for code patterns, andjqto update execution statistics indocs/blueprint/manifest.json.\n- [PROMPT_INJECTION]: The skill has an indirect prompt injection surface because it processes untrusted content from the web. Ingestion points: Data is gathered viaWebSearchandWebFetchin Step 2 to identify library 'gotchas' and documentation. Capability inventory: The skill is authorized toWritefiles and executeBashcommands. Boundary markers: No specific delimiters are defined in the instructions to isolate gathered external content from the rest of the documentation. Sanitization: The skill does not describe an explicit sanitization process for external documentation before it is integrated into the output files.
Audit Metadata