skills/bigdra50/skills/docs-architect/Gen Agent Trust Hub

docs-architect

Pass

Audited by Gen Agent Trust Hub on Jul 5, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes a Python script (scripts/docs_inventory.py) that invokes git via subprocess.run to gather file history and repository metadata. These calls use the list-based argument format and do not invoke a shell, following secure coding practices.
  • [SAFE]: The skill provides a proactive security checklist that instructs the agent to use ripgrep to search for accidentally committed secrets, passwords, and API keys within the documentation tree.
  • [SAFE]: Structural modifications in 'restructure' mode are governed by a migration ledger and require explicit user approval before execution, mitigating the risk of accidental data loss or unauthorized file changes.
  • [EXTERNAL_DOWNLOADS]: The documentation references well-known and trusted third-party tools for documentation quality assurance, such as lychee for link checking and Vale for prose linting. These are standard development tools and do not involve untrusted remote code execution.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 5, 2026, 01:15 PM
Security Audit — agent-trust-hub — docs-architect