docs-architect

Pass

Audited by Gen Agent Trust Hub on Jun 18, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill follows a well-defined 'diagnosis → prescription → approval' pipeline for documentation maintenance, emphasizing user oversight before making changes.
  • [COMMAND_EXECUTION]: The skill executes standard git commands (like git mv and git log) and a provided Python script (scripts/docs_inventory.py) to analyze file structures. These operations are limited to the local repository and aligned with its stated purpose.
  • [SAFE]: The script scripts/docs_inventory.py performs local file system analysis and link checking without any network requests or dynamic code execution.
  • [SAFE]: In references/checklists.md, the skill provides users with a ripgrep command designed to detect potential hardcoded secrets (API keys, tokens) in documentation files, which is a defensive security feature.
  • [EXTERNAL_DOWNLOADS]: The skill mentions well-known developer tools like lychee, Vale, and cspell as recommended CI integrations but does not attempt to download or execute them automatically.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 18, 2026, 03:22 AM
Security Audit — agent-trust-hub — docs-architect