dsh-doc-site-sync

Pass

Audited by Gen Agent Trust Hub on Aug 22, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute standard project-local development commands such as pnpm docs:dev, pnpm docs:check, pnpm run doc-sync, and pnpm run lint. These are typical for documentation management and build workflows within a software repository.
  • [INDIRECT_PROMPT_INJECTION]: The skill has a surface for indirect prompt injection as it processes repository Markdown files and TypeScript manifest files (website/docs.ts) to project them into a website structure.
  • Ingestion points: Reads local documentation files (docs/*.md) and configuration files (website/docs.ts, website/.vitepress/config.ts).
  • Boundary markers: None explicitly defined in the instructions for data ingestion.
  • Capability inventory: Executes local shell commands via pnpm for building, checking, and syncing documentation.
  • Sanitization: The skill describes a projection process (scripts/project-doc-site.ts) that applies specific rules to repository links and images, providing a layer of transformation between source content and the generated site.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 22, 2026, 02:49 PM
Security Audit — agent-trust-hub — dsh-doc-site-sync