cs-libdoc
Pass
Audited by Gen Agent Trust Hub on Jun 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes local utility scripts, specifically
validate-yaml.pyandsearch-yaml.py, to ensure the integrity of generated documentation and to manage the project manifest. These operations are restricted to the local environment for validation and metadata management. - [PROMPT_INJECTION]: The skill processes source code (untrusted external data) to generate documentation, which presents a surface for indirect prompt injection.
- Ingestion points: Reads files from
source_rootandsource_filesprovided by the user. - Boundary markers: Includes strict instructions to focus on 'signatures, type definitions, and default values' and explicitly forbids 'guessing' or 'fabricating' content.
- Capability inventory: Executes
validate-yaml.pyandsearch-yaml.py; performs file writes to thedocs/api/directory. - Sanitization: Employs YAML validation scripts to verify the structure and required fields of the generated output.
Audit Metadata