documentation-generation
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references standard documentation packages and plugins from the official npm registry, including
@ts-rest/open-api,swagger-ui-react,typedoc-plugin-markdown, and@docusaurus/preset-classic. - [COMMAND_EXECUTION]: Includes documentation for running standard build commands such as
npm install,npm run dev, andtypedoc. These commands are standard for the intended documentation-as-code workflow. - [INDIRECT_PROMPT_INJECTION]: The skill defines patterns for converting code comments into documentation, which represents an ingestion surface for untrusted content.
- Ingestion points: Source code files processed by documentation generators.
- Boundary markers: Uses standard comment delimiters (e.g.,
/** ... */). - Capability inventory: Shell command execution via
npmandnpx. - Sanitization: Relies on the standard parsing behavior of TypeDoc and JSDoc.
Audit Metadata