skills/luongnv89/skills/doc-manager/Gen Agent Trust Hub

doc-manager

Warn

Audited by Gen Agent Trust Hub on Oct 15, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONDYNAMIC_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill performs several shell commands to manage the repository state and validate generated content.
  • It uses git commands including rev-parse, fetch, pull, and branch to synchronize the working environment before making modifications.
  • It executes generated shell scripts using bash -n for syntax validation and runs them with --help and --check flags to confirm expected behavior.\n- [DYNAMIC_EXECUTION]: The skill generates and executes code at runtime based on the project's documentation and structure.
  • It creates validation scripts (scripts/validate-.sh) by populating a template with logic derived from the project's runbooks.
  • The instructions explicitly direct the agent to run these generated scripts to verify environment state, which constitutes execution of dynamically generated content.\n- [PRIVILEGE_ESCALATION]: The skill modifies file access permissions for dynamically created assets.
  • It uses the chmod +x command to make generated validation scripts executable within the repository.\n- [INDIRECT_PROMPT_INJECTION]: The skill's core workflow involves processing untrusted codebase content which acts as an injection surface.
  • Ingestion points: It reads existing Markdown files (README.md, docs/*.md) and the entire source codebase to establish the ground truth for documentation updates.
  • Boundary markers: There are no defined delimiters or instructions provided to isolate processed project data from the agent's logic.
  • Capability inventory: The skill has broad capabilities including filesystem writes, git operations, and execution of shell scripts.
  • Sanitization: The skill lacks documented procedures for sanitizing or escaping the content it ingests from project files before using it to generate documentation or validation logic.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 15, 2026, 03:33 PM