review-docs
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
Bashtool to rungit status,pnpm lint:md, and a local validation scriptcheck-frontmatter.sh. These commands are used for verifying file status and performing deterministic quality checks on documentation files.\n- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process documentation files, which represents an indirect prompt injection surface. A malicious document could attempt to influence the agent's review output.\n - Ingestion points: The skill reads markdown files specified by the
file-pathargument.\n - Boundary markers: No explicit delimiters or instructions are provided to the agent to disregard instructions embedded within the reviewed documentation.\n
- Capability inventory: The skill has access to
Bash,Read,Glob,Grep, and the ability to spawn sub-agents.\n - Sanitization: No sanitization or filtering of the document content is performed before it is processed by the agent or sub-agents.
Audit Metadata