docs-generator
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized network operations were detected. The skill instructions focus entirely on generating documentation templates.
- [DATA_EXPOSURE_EXFILTRATION]: The skill explicitly includes a 'Security & Secrets' section in its templates, which instructs the agent to remind users never to commit tokens and to handle PII properly. This follows security best practices.
- [INDIRECT_PROMPT_INJECTION]: The skill involves analyzing a codebase (ingestion of untrusted data) to generate documentation. While this is a potential attack surface for indirect injection, the risk is minimal as the output consists of static documentation files rather than executable code or system configurations.
- Ingestion points: Phase 1 involves repository analysis of user-provided codebases.
- Boundary markers: Not explicitly defined in the templates.
- Capability inventory: The skill itself does not provide or call any dangerous system tools; it generates text content.
- Sanitization: Not applicable as the output is markdown documentation.
Audit Metadata