fstack-document
Pass
Audited by Gen Agent Trust Hub on Jul 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is designed for the benign purpose of generating documentation. It includes specific instructions to exclude sensitive data such as keys, tokens, and
.envvalues from the generated files. - [PROMPT_INJECTION]: The skill ingests data from project files, which represents a surface for indirect prompt injection. However, because the skill lacks network access or code execution capabilities, the risk is considered safe.
- Ingestion points: Reads project structure, entry points, modules, data models, and configuration (SKILL.md).
- Boundary markers: None specified for the data being read.
- Capability inventory: File system read access and file-write access to the
docs/directory. - Sanitization: No explicit sanitization of the ingested code content is defined.
Audit Metadata