docgen
Pass
Audited by Gen Agent Trust Hub on Mar 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute local scripts such as
./scripts/check-usage-docs-sync.shandnode scripts/generate-usage-docs.mjsusing the Bash tool. These operations are intended for documentation verification and generation within the project environment. - [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface because it processes project source files and skill definitions to generate documentation. 1. Ingestion points: Source files in
skills/commands/andcli/src/commands/as defined in the configuration. 2. Boundary markers: No specific delimiters or isolation instructions are provided to the agent for the processed content. 3. Capability inventory: The skill has access toRead,Write, andBashtools, which allows for reading source data and executing local scripts. 4. Sanitization: There is no mention of sanitization or validation of the content extracted from project files before it is used to generate documentation.
Audit Metadata