byrdocs-contribute
Pass
Audited by Gen Agent Trust Hub on Jul 3, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill makes extensive use of command-line tools to facilitate the contribution process.
- It executes the BYRDocs CLI (
byrdocs) for authentication, file uploads, metadata generation, and validation. - It utilizes the GitHub CLI (
gh) andgitfor repository management, including forking, cloning, branching, and creating Pull Requests. - The instructions include defensive programming practices, specifically directing the agent to use MD5 hashes for branch names and temporary files to prevent shell injection vulnerabilities from user-controlled strings (like file titles or descriptions).
- [EXTERNAL_DOWNLOADS]: The skill retrieves executable code from the public npm registry.
- It encourages the use of
npx -y @byrdocs/cli@latestto execute the vendor's command-line interface dynamically. - It provides instructions for permanent installation via
npm install -g @byrdocs/cliif requested by the user. - These downloads are associated with the official package for the 'byrdocs' service described in the skill.
Audit Metadata