quality-documentation-manager
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary purpose is instructional and administrative regarding document control systems. All analyzed files focus on regulatory compliance (21 CFR Part 11) and quality management (ISO 13485).
- [COMMAND_EXECUTION]: The skill includes Python scripts (
document_validator.pyanddocument_version_control.py) designed for command-line use. Analysis shows these scripts utilize only the Python standard library (argparse, json, re, hashlib, etc.) and do not invoke external shell commands, system processes, or perform any network operations. - [DATA_EXFILTRATION]: No network operations were detected. The scripts operate strictly on local JSON metadata or text files within a dedicated subdirectory (
./doc_store), with no code paths leading to data exfiltration or external communication. - [INDIRECT_PROMPT_INJECTION]: While the scripts ingest user-provided document metadata and content, the risk is negligible as the skill lacks exploitable capabilities. There are no subprocess calls, network requests, or dynamic code execution paths (eval/exec) that could be triggered by malicious content in the processed documents.
- [PRIVILEGE_ESCALATION]: The skill does not attempt to acquire elevated permissions. File system access is restricted to the local working directory for document storage and metadata persistence.
Audit Metadata