harness-docs-audit
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local Python script
scripts/check_docs.pyto audit project documentation. This script operates within the provided project root and performs read-only analysis of.mdand.htmlfiles.\n- [DATA_EXPOSURE]: The audit script reads documentation files (README.md,docs/*.md) to verify link validity and line counts. It does not access sensitive system paths (like.sshor.aws) or environment variables.\n- [REMOTE_CODE_EXECUTION]: The skill does not perform any remote code execution or external downloads. All checks are performed locally on the user's project files using standard Python libraries (argparse,json,html.parser).\n- [PROMPT_INJECTION]: The instructions inSKILL.mddefine deterministic review rules and size guidance. There are no patterns observed that attempt to bypass AI safety filters or override agent behavior beyond the intended auditing task.\n- [SAFE]: The script explicitly identifies and flags external dependencies in HTML artifacts (e.g.,<script src='...'>) as a policy violation for documentation, further demonstrating a posture of minimizing external runtime dependencies.
Audit Metadata