cs-doc-api
Pass
Audited by Gen Agent Trust Hub on Jul 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill requires the agent to execute local utility scripts, including
validate-yaml.py,search-yaml.py, andcs-onboard, to manage the documentation workflow and ensure file integrity. - [PROMPT_INJECTION]: The skill processes project source code to extract documentation details, which presents a surface for indirect prompt injection. 1. Ingestion points: source files and root directories specified in manifest.yaml. 2. Boundary markers: no explicit delimiters or safety instructions are defined for the source extraction process. 3. Capability inventory: file system writing to the docs/api directory and local script execution. 4. Sanitization: no explicit sanitization of extracted source code content is performed before generating documentation.
Audit Metadata