rewrite-python-docs
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes source code, docstrings, and configuration files as the source of truth for documentation updates. This creates a surface for indirect prompt injection where instructions embedded in the code could influence agent behavior.
- Ingestion points: Source code, docstrings,
pyproject.toml, andzensical.tomlare read by the agent as instructed inSKILL.md. - Boundary markers: The skill does not define specific delimiters or instructions to ignore embedded commands in the processed data.
- Capability inventory: The skill can write files, execute a local Python script, and run shell commands like
pytest,lint, andfmttools. - Sanitization: Content is processed and rewritten without specific sanitization steps to filter out embedded instructions.
- [COMMAND_EXECUTION]: The skill invokes several local commands and scripts to fulfill its documentation and validation tasks.
- It runs
scripts/gen-ref-pages.pyto generate the project's reference documentation structure. - It executes validation tasks using
uv run pytestfor doctests and tools likerumdl,mise run lint, andmise run docs:buildas specified inSKILL.md. - [DYNAMIC_EXECUTION]: The skill instructs the agent to write compact doctests in public APIs and then execute them using
pytestfor validation. This involves generating executable Python snippets within docstrings that are subsequently run in the development environment. - [EXTERNAL_DOWNLOADS]: The helper script
gen-ref-pages.pyspecifies a dependency on thetomlkitpackage, which is automatically fetched from the Python Package Index (PyPI) via theuvtool at execution time. This follows standard Python dependency management practices.
Audit Metadata