undocs
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill consists entirely of documentation for a legitimate development tool and does not contain any executable scripts or malicious patterns.
- [EXTERNAL_DOWNLOADS]: The documentation references fetching templates from the UnJS GitHub organization and schemas from Unpkg, which are established resources in the web development community.
- [COMMAND_EXECUTION]: The CLI commands documented (such as
undocs build) are standard utilities for static site generation. - [INDIRECT_PROMPT_INJECTION]: While the tool processes user-provided markdown, which is a common ingestion surface, it does so for the intended purpose of documentation rendering and follows standard Nuxt Content processing patterns.
- [DATA_EXPOSURE]: The documentation mentions standard CI/CD environment variables (e.g., VERCEL_URL, CF_PAGES_URL) used for site URL inference and branch detection during deployment, which is standard practice for static site generators.
Audit Metadata