skills/finos/morphir/technical-writer/Gen Agent Trust Hub

technical-writer

Pass

Audited by Gen Agent Trust Hub on May 18, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides automated documentation workflows using standard Python and Shell scripts. These scripts perform static analysis on project files (Markdown, Go, YAML) without making external network requests or accessing sensitive system files.
  • [SAFE]: All scripts use yaml.safe_load() to process configuration and frontmatter, preventing unsafe deserialization attacks.
  • [SAFE]: The dependency pyyaml is a well-known, standard library for the tasks performed.
  • [SAFE]: Command execution is limited to project-related tasks such as npm run build and mise run, which are triggered as part of documented development workflows.
  • [PROMPT_INJECTION]: The skill instructions define its role clearly and do not contain any instructions aimed at bypassing AI safety guidelines or extracting system prompts.
Audit Metadata
Risk Level
SAFE
Analyzed
May 18, 2026, 06:44 AM
Security Audit — agent-trust-hub — technical-writer