do-tutorial-docs
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [NO_CODE]: The skill consists entirely of Markdown documentation, templates, and style guides. It does not contain any executable scripts, tool configurations, or commands for the agent to run in its own environment.
- [SAFE]: The skill uses industry-standard documentation practices (Diataxis framework). All examples, such as the weather API tutorial in
references/example-weather-api.md, use benign placeholders for API keys ('your-api-key-here') and reference well-known services like Node.js. - [INDIRECT_PROMPT_INJECTION]: The skill provides structural templates for generating documentation from external information. While the ingestion of untrusted data (descriptions of features to document) is a standard part of the documentation workflow, the skill defines structural constraints and does not include capabilities like automated file execution or network exfiltration that would make such injection exploitable.
Audit Metadata