bagisto-documentation
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides several shell commands (using
grep,git, andnpm) and embedded Python scripts to automate documentation quality checks. Specifically,publishing.mdincludes scripts to verify that all renamed or deleted files have corresponding redirects and that no 'orphan' pages exist outside the sidebar configuration. - [DYNAMIC_EXECUTION]: The skill contains a sample Playwright script in
screenshots.mdand utility scripts inpublishing.md. These are intended for local execution by the user to maintain documentation standards and are transparent in their operation, targeting only local repository files. - [DATA_EXPOSURE]: The
screenshots.mdfile contains a Playwright script with hardcoded credentials (admin@example.com/admin123). However, these are explicitly documented as public default credentials from the BagistoAdminsTableSeederused for freshly seeded installations, posing no risk to live systems. - [SAFE]: The skill follows developer best practices by encouraging verification of code claims against the source and using standard environment variables (
DEV_URL) for local development configuration.
Audit Metadata