adk-docs
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes
GlobandGreptools to discover documentation and code examples within the user's workspace. These search operations are restricted to relevant project files such asagent.config.tsand existing Markdown documentation, which is necessary for the skill's primary purpose. - [PROMPT_INJECTION]: The skill has an indirect prompt injection surface as it processes untrusted user project files to generate documentation.
- Ingestion points: Reads local project code and documentation files via
GlobandGrep(SKILL.md). - Boundary markers: None identified.
- Capability inventory: Limited to workspace search and documentation writing; no network access or privilege escalation tools are requested.
- Sanitization: No explicit sanitization of ingested code content is described.
- [SAFE]: No obfuscation, persistence mechanisms, or credential harvesting patterns were detected. References to
@botpress/runtimeare consistent with the vendor's own official SDKs.
Audit Metadata