doc-generator
Pass
Audited by Gen Agent Trust Hub on Aug 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary function is to generate Markdown documentation from Python source code, which is a common and safe developer utility.
- [COMMAND_EXECUTION]: The skill suggests using Python standard library modules like
ast,inspect, andpathlib. These are used for static analysis and file handling within the user's codebase, which is consistent with the skill's stated purpose. - [PROMPT_INJECTION]: No instructions were found that attempt to override agent safety guidelines or bypass constraints.
- [DATA_EXFILTRATION]: No network operations or attempts to exfiltrate sensitive data were detected. The skill operates locally on provided file paths.
- [OBFUSCATION]: No obfuscated code, hidden URLs, or suspicious encoding patterns were found in the skill files. The backticks identified in the included
skill-report.jsonare standard Markdown formatting for code blocks and inline code, correctly identified as false positives by the author's own audit. - [INDIRECT_PROMPT_INJECTION]: While the skill processes untrusted Python source code, it uses the
astmodule for parsing, which is a safe way to analyze code structure without execution. The output is structured Markdown, minimizing the risk of downstream injection.
Audit Metadata