opencode-web-quality-docs
Pass
Audited by Gen Agent Trust Hub on Jun 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands such as
bash -nfor syntax checking andshellcheckfor linting scripts, alongside Docker build and dry-run operations. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface as it processes untrusted data from repository files to generate documentation and verify tests.
- Ingestion points: Project files including
README.md,TECHNICAL.md,.github/workflows/ci.yml, and thetests/directory. - Boundary markers: No explicit delimiters or warnings to ignore instructions within ingested files are provided.
- Capability inventory: The skill can execute shell commands and write to files.
- Sanitization: No input validation or sanitization of processed file content is mentioned.
Audit Metadata