write-to-docusaurus
Pass
Audited by Gen Agent Trust Hub on May 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill directs the agent to run local shell commands like
pnpm buildandpnpm startto validate documentation projects. This provides a vector for arbitrary code execution defined within the target project's build scripts. - [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection when processing external articles or news analysis. Ingestion points: Article content and external summaries (Step 3.6). Boundary markers: None; the skill lacks delimiters to isolate external text. Capability inventory: File-write operations and shell command execution. Sanitization: Limited to MDX syntax escaping for compilation safety.
Audit Metadata