dsh-doc

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill requires the agent to execute repository-local CLI commands such as 'pnpm' for running tests and documentation syncing, 'git' for checking diffs and fetching updates, and the 'dsh' vendor tool for plugin management. These commands are integral to the skill's purpose of ensuring documentation accuracy relative to the codebase.
  • [INDIRECT_PROMPT_INJECTION]: The skill possesses a technical surface for indirect prompt injection because it processes content from within the repository to generate new documentation. Ingestion points: reads 'AGENTS.md', 'package.json', 'src/index.ts', and existing documentation files. Boundary markers: utilizes structural YAML frontmatter and bilingual line alignment but does not mention specific delimiters to prevent the interpretation of instructions embedded in the source content. Capability inventory: includes the ability to execute shell commands ('pnpm', 'git', 'dsh') and perform file system writes. Sanitization: no explicit sanitization of ingested prose or code comments is documented.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 9, 2026, 06:33 PM