update-docs
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/check_doc_staleness.pyexecutes localgitcommands usingsubprocess.run. This is used to analyze repository churn and track file changes to identify stale documentation. The implementation uses a list-based argument approach without a shell, mitigating command injection risks. - [INDIRECT_PROMPT_INJECTION]: The skill processes local Markdown files and codebase files to verify documentation accuracy. This represents a potential surface for indirect prompt injection if the files contain malicious instructions. However, the skill implements path filtering to prevent access to sensitive system files (e.g., blocking absolute paths and shell expansion characters) and limits analysis to the repository scope.
- Ingestion points:
scripts/check_doc_staleness.pyreads Markdown files (.md) and cited code files within the repository. - Boundary markers: The skill encourages the use of specific
path/to/file:linecitations to verify claims. - Capability inventory: Uses
subprocess.runfor git history andPath.openfor file content verification. - Sanitization: Implements path validation in
parse_citationsto exclude absolute paths, home directory references, and shell expansion characters.
Audit Metadata