api-doc-generator
Pass
Audited by Gen Agent Trust Hub on Jul 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements legitimate functionality for documentation generation with no evidence of obfuscation, persistence mechanisms, or unauthorized network activity.\n- [INDIRECT_PROMPT_INJECTION]: The skill's primary function involves scanning untrusted source code, which serves as an ingestion point for potentially malicious instructions embedded in comments or metadata.\n
- Ingestion points: Project source files (Controller classes and methods in Java/Kotlin).\n
- Boundary markers: Absent; the instructions do not define delimiters to isolate extracted code content from the documentation generation prompt.\n
- Capability inventory: The agent uses file system read access for code scanning and file system write access for saving outputs to the
./docsdirectory.\n - Sanitization: The instructions do not specify any validation or sanitization of extracted strings before they are interpolated into the Markdown templates.
Audit Metadata