api-docs
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security risks were identified. The skill's logic is entirely focused on parsing local source code and generating documentation in Markdown or OpenAPI formats.
- [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface due to its core function of processing untrusted source code and docstrings.
- Ingestion points: Source code files, modules, and docstrings read during the parsing phase.
- Boundary markers: Absent. The instructions do not define specific delimiters or instructions to prevent the agent from following commands embedded in the docstrings of the code it parses.
- Capability inventory: File system read access (to extract API metadata) and file system write access (to generate
docs/api.mdor other documentation outputs). - Sanitization: Absent. The instructions do not mandate sanitizing or escaping the content extracted from docstrings before it is used in the final documentation output.
Audit Metadata