docs-watch
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches documentation sitemaps, contract addresses, and network configuration from Celo's official documentation domains (
docs.celo.org,www.celopg.eco). It also retrieves ecosystem statistics from DefiLlama (api.llama.fi), a well-known industry service. - [COMMAND_EXECUTION]: Employs standard system utilities including
curlfor data retrieval,jqfor JSON processing, and the GitHub CLI (gh) for automated pull request creation and management. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest data from external web sources to update repository reference files and generate descriptive pull request bodies.
- Ingestion points: Data is sourced from
docs.celo.org,api.llama.fi, andwww.celopg.ecoas specified inSKILL.md. - Boundary markers: None explicitly defined in the prompt instructions for the pull request generation.
- Capability inventory: The skill possesses file-write permissions, Git branch/push capabilities, and the ability to open pull requests through the GitHub API.
- Sanitization: The procedure involves extracting specific structured data points (such as contract addresses and status tables) from the fetched content, which effectively validates the input before it is used in repository updates.
Audit Metadata