skills/langchain-ai/docs/docs-edit/Gen Agent Trust Hub

docs-edit

Pass

Audited by Gen Agent Trust Hub on Nov 4, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • Command Execution: The skill utilizes several command-line tools including git for branch management, gh for interacting with GitHub PRs and APIs, and make for running local linting and link-checking tasks. These are standard operations for a documentation and development workflow.
  • Configuration Trust (Mise): Instructions are provided to use mise trust on project-specific .mise.toml files. This command authorizes the execution of environment-specific hooks and tasks. While this pattern grants trust to configuration files within the repository, it is a standard part of the Mise tool's security model for managing development environments.
  • Data Retrieval from Official Repositories: The skill fetches content from official repositories (e.g., langchain-ai/langchain) via the GitHub API to ensure documentation accuracy. This data retrieval is targeted at the vendor's own infrastructure and is used for factual verification.
  • Indirect Prompt Injection Surface: The skill processes external data such as pull request diffs and source code files from GitHub. While this introduces a surface for potentially processing untrusted instructions embedded in text or code, the skill is designed to use this information for documentation editing, and the data originates from the project's own repositories.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 4, 2026, 05:49 PM