generate-api-documentation

Pass

Audited by Gen Agent Trust Hub on Jun 19, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No security issues detected during the analysis of the skill. The instructions and scripts are focused solely on the intended purpose of generating API documentation.
  • [COMMAND_EXECUTION]: The skill uses dynamic context injection (! syntax) to execute shell commands like grep, find, and wc at load time. These commands are used legitimately to gather project-specific metadata (API annotations, existing spec files, and dependencies) and do not involve exfiltration, sensitive file access, or unsafe handling of user input.
  • [PROMPT_INJECTION]: The skill includes defensive instructions to prevent the agent from interpreting embedded markdown headers or instruction patterns as operative conditions or overrides, which is a security best practice when processing user-provided code.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 19, 2026, 08:19 AM
Security Audit — agent-trust-hub — generate-api-documentation