docs-check
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local bash script, scripts/check-docs.sh, which uses common development tools such as git, grep, sed, and find to analyze the repository state.\n- [EXTERNAL_DOWNLOADS]: The script performs a git fetch operation to synchronize with the repository's remote origin. This is a standard and safe development operation used to compare local changes against the main branch.\n- [INDIRECT_PROMPT_INJECTION]: The skill has a potential surface for indirect injection as it ingests and processes data from the repository's git history.\n
- Ingestion points: The ALL_CHANGED variable in scripts/check-docs.sh collects filenames from git diff to pass to the agent context.\n
- Boundary markers: Filenames are presented in the tool output using standard Markdown list formatting.\n
- Capability inventory: The skill environment allows for reading files and executing local scripts based on the suggestions provided by the tool.\n
- Sanitization: Filenames are processed raw without additional sanitization, though the risk is limited to metadata-level influence.\n- [SAFE]: No hardcoded credentials, persistence mechanisms, or obfuscated payloads were detected. The skill's functionality is transparent and strictly aligned with its documented purpose of documentation maintenance.
Audit Metadata