technical-writer
Pass
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides automated documentation workflows using standard Python and Shell scripts. These scripts perform static analysis on project files (Markdown, Go, YAML) without making external network requests or accessing sensitive system files.
- [SAFE]: All scripts use
yaml.safe_load()to process configuration and frontmatter, preventing unsafe deserialization attacks. - [SAFE]: The dependency
pyyamlis a well-known, standard library for the tasks performed. - [SAFE]: Command execution is limited to project-related tasks such as
npm run buildandmise run, which are triggered as part of documented development workflows. - [PROMPT_INJECTION]: The skill instructions define its role clearly and do not contain any instructions aimed at bypassing AI safety guidelines or extracting system prompts.
Audit Metadata