api-doc-gen
Pass
Audited by Gen Agent Trust Hub on Jul 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses Python's standard library to perform static analysis of code. It does not execute the code it scans, which prevents any runtime attacks from malicious source files.
- [DATA_EXFILTRATION]: The tool operates locally and does not include any network communication capabilities. It includes protective logic to skip sensitive directories like .git and .env during the scanning process.
- [REMOTE_CODE_EXECUTION]: No dynamic code execution (eval, exec) or remote script fetching (curl|bash) is present. The script parses Python code using the
astmodule, which is a secure method for code inspection. - [EXTERNAL_DOWNLOADS]: The skill is self-contained and does not download or install any external packages or dependencies at runtime.
- [PROMPT_INJECTION]: There are no instructions in the skill metadata or script that attempt to manipulate the AI agent's behavior or override its safety guidelines.
Audit Metadata