docs-manager

Pass

Audited by Gen Agent Trust Hub on Jun 21, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill is hosted on the author's public GitHub repository (github.com/ceasarXuu/AstartesSkills), which serves as the source for installation and management.
  • [COMMAND_EXECUTION]: Instructions in the skill workflow recommend running the repository's existing test commands to validate that documentation reorganizations have not broken project-specific links or index files.
  • [PROMPT_INJECTION]: The skill reads data from repository documentation files and configuration manifests (e.g., version.json), creating a surface for indirect prompt injection. 1. Ingestion points: docs/ markdown files and repository version files. 2. Boundary markers: Not present in the provided instructions. 3. Capability inventory: File system write operations for archiving and shell command execution for running project tests. 4. Sanitization: The skill performs structural and schema validation but does not apply sanitization to the processed text.
  • [SAFE]: The validation script (scripts/validate_docs_manager.py) utilizes standard Python libraries (argparse, json, re, pathlib) to perform local structural integrity checks without external dependencies or network operations.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 21, 2026, 09:11 PM