docs-manager
Pass
Audited by Gen Agent Trust Hub on Jun 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill is hosted on the author's public GitHub repository (
github.com/ceasarXuu/AstartesSkills), which serves as the source for installation and management. - [COMMAND_EXECUTION]: Instructions in the skill workflow recommend running the repository's existing test commands to validate that documentation reorganizations have not broken project-specific links or index files.
- [PROMPT_INJECTION]: The skill reads data from repository documentation files and configuration manifests (e.g.,
version.json), creating a surface for indirect prompt injection. 1. Ingestion points:docs/markdown files and repository version files. 2. Boundary markers: Not present in the provided instructions. 3. Capability inventory: File system write operations for archiving and shell command execution for running project tests. 4. Sanitization: The skill performs structural and schema validation but does not apply sanitization to the processed text. - [SAFE]: The validation script (
scripts/validate_docs_manager.py) utilizes standard Python libraries (argparse,json,re,pathlib) to perform local structural integrity checks without external dependencies or network operations.
Audit Metadata