byrdocs-contribute

Pass

Audited by Gen Agent Trust Hub on Jul 3, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill makes extensive use of command-line tools to facilitate the contribution process.
  • It executes the BYRDocs CLI (byrdocs) for authentication, file uploads, metadata generation, and validation.
  • It utilizes the GitHub CLI (gh) and git for repository management, including forking, cloning, branching, and creating Pull Requests.
  • The instructions include defensive programming practices, specifically directing the agent to use MD5 hashes for branch names and temporary files to prevent shell injection vulnerabilities from user-controlled strings (like file titles or descriptions).
  • [EXTERNAL_DOWNLOADS]: The skill retrieves executable code from the public npm registry.
  • It encourages the use of npx -y @byrdocs/cli@latest to execute the vendor's command-line interface dynamically.
  • It provides instructions for permanent installation via npm install -g @byrdocs/cli if requested by the user.
  • These downloads are associated with the official package for the 'byrdocs' service described in the skill.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 3, 2026, 05:31 PM