docs
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes shell commands via
subprocess.runto interact with Git for repository metadata and state management (inscripts/cv_init_store.py). It also invokes themermaid-cliornpxto render and validate Mermaid diagrams (inscripts/validate_artifacts.py). - [EXTERNAL_DOWNLOADS]: The
scripts/validate_artifacts.pyscript executesnpx -y @mermaid-js/mermaid-cli@11.16.0, which fetches the official Mermaid CLI package from the NPM registry at runtime for diagram processing. - [INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it ingests untrusted codebase data (source code and existing docs) to author documentation prose, tables, and diagrams.
- Ingestion points: Project source files and repository documentation are scanned and read by the
retcon,update, andvalidateworkflows. - Boundary markers: The skill uses template-defined markers (
<!-- @agent: ... -->,<!-- @human: ... -->) to distinguish AI-authored sections, andreferences/prose-policy.mdrestricts generated content to specific artifact types. - Capability inventory: The skill has the ability to write documentation files (
scripts/scaffold.py), execute shell commands for Git operations, and render diagrams using external tools. - Sanitization: Output generation is constrained by pre-defined Markdown templates and a "Simple Technical English" ruleset (
references/simple-english/ruleset.md) designed to enforce clear and factual authoring.
Audit Metadata