docs
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill performs local command execution to validate and release documentation.
- It executes
npm buildandnpm checkwithin theweb/docsdirectory to verify the integrity of Astro-based documentation and TypeScript code. - It invokes internal utility scripts (
scripts/check-links.shandscripts/verify-deploy.sh) to perform site-wide link checking and deployment verification. - It manages Git workflows (commit, push, and tagging) for releases, but only when explicit authorization is granted for a specific action, ensuring no unauthorized mutations to the repository occur.
- [INDIRECT_PROMPT_INJECTION]: The skill has a defined attack surface as it processes external and user-supplied data to generate documentation.
- Ingestion points: Reads free-form user requests in multiple languages (RU/EN) and surveys repository content, including entity READMEs, source code comments, and existing MDX files.
- Boundary markers: Implements a strict
PLAN — docsblock and a structured mode-resolution logic (REVIEW, FIX, PLUGIN, etc.) to ensure the agent remains within the intended scope. - Capability inventory: Possesses file system read/write access for documentation files, shell execution capabilities for build tools and Git, and network access specifically for deployment provenance verification.
- Sanitization: Employs a sophisticated multi-agent quorum review process (requiring 2/3 agreement across three independent reviewers) and utilizes fixed MDX templates and repository rules to prevent the adoption of malicious instructions or unsafe code patterns from the analyzed source data.
Audit Metadata