cli
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill facilitates the use of the
@farming-labs/docsCLI for various operations such as scaffolding, auditing, and deploying documentation. It promotes the use of local binaries and package runners for these tasks. - [EXTERNAL_DOWNLOADS]: The skill instructions frequently reference downloading the latest vendor-owned packages via package manager runners (npx, pnpm dlx). These are legitimate vendor resources used for the skill's primary functionality.
- [DYNAMIC_EXECUTION]: The
docs codeblocks validatecommand enables the execution of code snippets embedded in Markdown files. The documentation emphasizes that this feature requires explicit opt-in configuration and is used for verifying the correctness of documentation examples. - [INDIRECT_PROMPT_INJECTION]: As the skill processes documentation content which could be sourced externally, it has an inherent surface for indirect prompt injection. However, it mitigates this by requiring structured metadata for actions and focusing on auditing rather than blind execution of instructions.
Audit Metadata