knowledge-base

Pass

Audited by Gen Agent Trust Hub on Aug 4, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill's primary purpose is educational, providing templates and best practices for knowledge management.
  • [COMMAND_EXECUTION]: Includes standard bash commands for initializing documentation frameworks like Docusaurus and MkDocs (e.g., npx create-docusaurus@latest, pip install mkdocs). These are benign, illustrative examples for developer setup.
  • [REMOTE_CODE_EXECUTION]: Contains a GitHub Action workflow example that uses actions/checkout and actions/github-script. These are official GitHub-maintained actions used for legitimate maintenance tasks (stale content reporting) and originate from a trusted organization.
  • [CREDENTIALS_UNSAFE]: Includes placeholder strings such as YOUR_APP_ID and YOUR_API_KEY for Algolia search integration. These are standard documentation placeholders and do not contain hardcoded secrets.
  • [DATA_EXFILTRATION]: Contains example JavaScript snippets for Google Analytics and Plausible. These are well-known, legitimate analytics services used as intended for documentation tracking.
  • [NO_CODE]: The skill consists entirely of Markdown instructions and code templates; it does not contain or execute autonomous malicious scripts.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 4, 2026, 07:28 PM
Security Audit — agent-trust-hub — knowledge-base