bagisto-documentation

Pass

Audited by Gen Agent Trust Hub on Aug 21, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides several shell commands (using grep, git, and npm) and embedded Python scripts to automate documentation quality checks. Specifically, publishing.md includes scripts to verify that all renamed or deleted files have corresponding redirects and that no 'orphan' pages exist outside the sidebar configuration.
  • [DYNAMIC_EXECUTION]: The skill contains a sample Playwright script in screenshots.md and utility scripts in publishing.md. These are intended for local execution by the user to maintain documentation standards and are transparent in their operation, targeting only local repository files.
  • [DATA_EXPOSURE]: The screenshots.md file contains a Playwright script with hardcoded credentials (admin@example.com / admin123). However, these are explicitly documented as public default credentials from the Bagisto AdminsTableSeeder used for freshly seeded installations, posing no risk to live systems.
  • [SAFE]: The skill follows developer best practices by encouraging verification of code claims against the source and using standard environment variables (DEV_URL) for local development configuration.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 21, 2026, 04:52 AM
Security Audit — agent-trust-hub — bagisto-documentation