doc-generator

Pass

Audited by Gen Agent Trust Hub on Aug 11, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill's primary function is to generate Markdown documentation from Python source code, which is a common and safe developer utility.
  • [COMMAND_EXECUTION]: The skill suggests using Python standard library modules like ast, inspect, and pathlib. These are used for static analysis and file handling within the user's codebase, which is consistent with the skill's stated purpose.
  • [PROMPT_INJECTION]: No instructions were found that attempt to override agent safety guidelines or bypass constraints.
  • [DATA_EXFILTRATION]: No network operations or attempts to exfiltrate sensitive data were detected. The skill operates locally on provided file paths.
  • [OBFUSCATION]: No obfuscated code, hidden URLs, or suspicious encoding patterns were found in the skill files. The backticks identified in the included skill-report.json are standard Markdown formatting for code blocks and inline code, correctly identified as false positives by the author's own audit.
  • [INDIRECT_PROMPT_INJECTION]: While the skill processes untrusted Python source code, it uses the ast module for parsing, which is a safe way to analyze code structure without execution. The output is structured Markdown, minimizing the risk of downstream injection.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 11, 2026, 02:42 PM
Security Audit — agent-trust-hub — doc-generator