python-docstrings

Pass

Audited by Gen Agent Trust Hub on Sep 24, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses subprocess.run in scripts/verify_doc_only_diff.py to call git for diffing and repository root detection. It also provides scripts/smoke_test.sh for local verification. These executions are scoped to local repository management and do not use shell interpolation, following secure implementation practices.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes Python files and docstrings from the local environment. It manages the risk of accidental logic changes or instruction following by providing a verification tool that compares the AST of the code before and after documentation changes, ensuring semantic consistency.
  • [SAFE]: All included scripts use standard Python library modules (like ast and tokenize) and do not perform network requests, access sensitive system files (e.g., SSH keys, credentials), or employ obfuscation techniques.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 24, 2026, 03:08 PM