full-stack-doc
Pass
Audited by Gen Agent Trust Hub on Jul 21, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides bash script examples (e.g., in
SKILL.md) that use standard filesystem commands such ascp,sed, andbasenameto automate the scaffolding process. These commands are intended to move and rename documentation templates within the project directory and are appropriate for the skill's primary purpose. - [EXTERNAL_DOWNLOADS]: The documentation templates (e.g.,
templates/delivery/1、技术细分模板.md) include numerous links to official developer resources and GitHub repositories for widely-used frameworks and libraries, including Element Plus, Pinia, Vue 3, Apache Echarts, and UniApp. These references target well-known and trusted technology services and do not involve the download of executable code or unauthorized data exfiltration. - [INDIRECT_PROMPT_INJECTION]: The skill operates by ingesting user-provided data (such as product names and versions) and interpolating them into document templates. While this creates an attack surface for indirect prompt injection, the skill includes structured authoring guidelines and validation checklists in its instructions to help maintain document integrity. The identified ingestion points are limited to the intended scaffolding functionality.
Audit Metadata