code-documenter
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill's workflow includes steps to validate documentation examples using
python -m doctestandpytest --doctest-modules. This process involves the execution of code snippets extracted directly from the docstrings of files being documented. - [COMMAND_EXECUTION]: The agent is instructed to run several shell commands for linting and type-checking, such as
tsc --noEmitandnpx @redocly/cli lint. It also suggests the use of Python tools likepydocstyleandinterrogatefor measuring documentation coverage. - [EXTERNAL_DOWNLOADS]: The reference guides recommend installing various third-party utility packages and dependencies using
npmandpip, includingeslint-plugin-jsdoc,linkchecker, andbroken-link-checkerfor site validation and documentation linting. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted source code and API specifications to generate its documentation output, creating an attack surface for indirect prompt injection.
- Ingestion points: The skill reads source files (.py, .ts, .js) and API definitions (YAML, JSON) provided by the user.
- Boundary markers: There are no explicit markers used to separate the content being documented from the instructions given to the agent.
- Capability inventory: The skill can read/write files, execute shell commands, and run code snippets via the Python doctest module.
- Sanitization: The skill does not appear to perform any sanitization or validation of the input content before it is used for documentation generation or validation tasks.
Audit Metadata