git-doc-updater
Pass
Audited by Gen Agent Trust Hub on Feb 20, 2026
Risk Level: SAFE
Full Analysis
- Indirect Prompt Injection (LOW): The skill identifies an attack surface where instructions embedded in project files could be executed by the agent during the documentation sync process. Ingestion points: File content is read via read_file and get_changed_files from the local repository. Boundary markers: None identified; there are no instructions to ignore embedded prompts in the analyzed file data. Capability inventory: The skill has the ability to modify local files using replace_string_in_file and can trigger other documentation-related skills like readme-updater and changelog-updater. Sanitization: No sanitization or validation of the ingested file content is performed before it is processed or passed to downstream tools.
Audit Metadata