docs-seeker
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes Node.js scripts to automate query classification, documentation fetching, and result analysis. It also instructs the agent to use shell commands such as
catfor file piping,git clonefor repository access, andnpm install -gfor tool setup. - [EXTERNAL_DOWNLOADS]: The skill fetches documentation content from context7.com and library-specific websites. It also supports cloning external GitHub repositories for deep code analysis when structured documentation is unavailable.
- [INDIRECT_PROMPT_INJECTION]: The skill processes technical documentation (llms.txt) retrieved from external, third-party websites, creating a surface for indirect prompt injection attacks.
- Ingestion points: Documentation is fetched via
scripts/fetch-docs.jsfrom context7.com and other external library domains. - Boundary markers: No explicit boundary markers or instructions to disregard embedded prompts are provided when the agent processes the external content.
- Capability inventory: The agent has the ability to execute Node.js scripts, perform shell operations, and install global NPM packages.
- Sanitization: While URLs are parsed by the scripts, the textual content of the documentation is not sanitized or filtered for potential malicious instructions before analysis by the agent.
Audit Metadata