docs-check-style
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill reviews documentation files provided by the user, which could contain embedded instructions intended to manipulate the agent's behavior during the review process.
- Ingestion points: Processes file or directory content identified via the
$ARGUMENTSparameter usingGlobandReadtools. - Boundary markers: There are no explicit instructions or delimiters used to isolate document content from the agent's core instructions.
- Capability inventory: The skill utilizes
Readfor file access,Bashfor linter execution, andWebFetchfor retrieving remote style guides. - Sanitization: No sanitization or filtering of the document text is performed prior to the agent's analysis.
- [COMMAND_EXECUTION]: The skill invokes the
valecommand-line utility to perform its primary function. - Evidence: Instructions specify running
vale --output=line $ARGUMENTSand searching for the binary in local paths like/tmp/gh-aw/bin/vale. - Context: The skill's YAML frontmatter restricts
Bashtool usage tovale *commands, which limits the risk of arbitrary command execution. - [EXTERNAL_DOWNLOADS]: The skill fetches guidance from external documentation pages to maintain up-to-date style rules.
- Evidence: Step 1 directs the agent to retrieve style guide content from several
elastic.coURLs using theWebFetchtool. - Context: All referenced URLs are hosted on the official domain of the skill's author (
elastic.co), representing legitimate vendor resources.
Audit Metadata