mintlify
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the installation of the
mintNPM package, which is an unrelated programming language. The correct package for Mintlify ismintlify. - [COMMAND_EXECUTION]: CLI commands such as
mint devandmint validateare listed, which would execute the wrong binary if themintpackage is installed as instructed. - [PROMPT_INJECTION]: The skill processes repository files, creating an indirect prompt injection surface. Evidence chain: 1. Ingestion points:
docs/docs.jsonanddocs/*.mdxfiles. 2. Boundary markers: Absent. 3. Capability inventory: Authorization to execute CLI commands and file system operations. 4. Sanitization: No validation or sanitization of documentation content is specified.
Audit Metadata