link-checker-agent
Pass
Audited by Gen Agent Trust Hub on Mar 9, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: Indirect Prompt Injection Surface. The skill's design allows it to ingest content from repository files that could potentially contain malicious instructions intended to influence the agent's behavior.
- Ingestion points: The scripts
scripts/check_broken_paths.pyandscripts/smart_fix_links.pyrecursively read all markdown and text files in the scanned directory. - Boundary markers: Absent. The skill does not use delimiters or instructions to isolate the documentation content from the agent's command context.
- Capability inventory: The skill is granted
BashandWritecapabilities inSKILL.md. The scriptsscripts/smart_fix_links.py,scripts/map_repository_files.py, andscripts/check_broken_paths.pyperform file-write operations to create maps, logs, and update documentation links. - Sanitization: Absent. The scripts do not validate or sanitize the content of the files they read before processing or rewriting them.
Audit Metadata