Gen Agent Trust Hub

The skill manages documentation synchronization by reading project code and updating files like README.md and ADRs. While it performs legitimate documentation tasks, it has an inherent vulnerability surface for indirect prompt injection because it ingests untrusted source code and modifies file content without using explicit boundary markers or sanitization filters to prevent the agent from executing instructions embedded in the code.

The provider classified the analyzed snapshot as NONE risk. This result applies to the content available at audit time.