writing
Pass
Audited by Gen Agent Trust Hub on May 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides structured templates and instructions for creating various types of project documentation. It operates on local project files and standard metadata to generate documentation appropriate for different audiences.
- [SAFE]: Command execution is limited to benign utilities:
git logis used to retrieve version history for documentation, and theopencommand is used to allow users to preview generated HTML reports in their browser. - [SAFE]: The skill includes documentation templates that mention best practices for secret management, such as using
.envfiles for configuration, without exposing any actual credentials. - [SAFE]: The HTML report template uses a standard JavaScript snippet for generating a table of contents and handling scroll spy functionality, which is transparent and poses no security risk.
- [SAFE]: No obfuscation, data exfiltration patterns, or unauthorized privilege escalation attempts were identified across the skill's instructions or template files.
Audit Metadata