code-docs
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The utility scripts
index.pyand_ontology.pyexecute local shell commands using thesubprocessmodule. - Evidence: The scripts specifically invoke
git rev-parseto retrieve the repository's short SHA and branch name. - Purpose: This repository metadata is used to populate a 'Git Context' section in the generated
INDEX.mdfiles, facilitating drift detection between documentation and code. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process documentation files from the local filesystem, which creates a potential surface for processing untrusted content.
- Ingestion points: Markdown files located in the
docs/directory are parsed during health audits and inquiry modes. - Boundary markers: The system utilizes
INDEX.mdfiles as structural anchors to manage and limit the loading of document context. - Capability inventory: The agent is empowered to read and write documentation files and execute the included Python scripts for project management.
- Sanitization: The
_ontology.pyutility employsyaml.safe_load()for parsing frontmatter, which prevents the execution of arbitrary Python objects during document processing.
Audit Metadata