knowledge-base
Pass
Audited by Gen Agent Trust Hub on Aug 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary purpose is educational, providing templates and best practices for knowledge management.
- [COMMAND_EXECUTION]: Includes standard bash commands for initializing documentation frameworks like Docusaurus and MkDocs (e.g.,
npx create-docusaurus@latest,pip install mkdocs). These are benign, illustrative examples for developer setup. - [REMOTE_CODE_EXECUTION]: Contains a GitHub Action workflow example that uses
actions/checkoutandactions/github-script. These are official GitHub-maintained actions used for legitimate maintenance tasks (stale content reporting) and originate from a trusted organization. - [CREDENTIALS_UNSAFE]: Includes placeholder strings such as
YOUR_APP_IDandYOUR_API_KEYfor Algolia search integration. These are standard documentation placeholders and do not contain hardcoded secrets. - [DATA_EXFILTRATION]: Contains example JavaScript snippets for Google Analytics and Plausible. These are well-known, legitimate analytics services used as intended for documentation tracking.
- [NO_CODE]: The skill consists entirely of Markdown instructions and code templates; it does not contain or execute autonomous malicious scripts.
Audit Metadata