llms-txt
Pass
Audited by Gen Agent Trust Hub on Apr 8, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted content from the local repository to generate metadata, creating an indirect prompt injection surface.
- Ingestion points: Files identified in Step 1 (README.md, docs/ directory, API documentation) are read in Step 3 of SKILL.md.
- Boundary markers: The instructions do not specify the use of delimiters or 'ignore embedded instructions' warnings when processing file content.
- Capability inventory: The skill possesses capabilities to read files across the repository and write the generated llms.txt to the repository root (Step 7).
- Sanitization: There are no explicit instructions for sanitizing or validating the content extracted from documentation before it is included in the output.
Audit Metadata