generate-api-documentation
Pass
Audited by Gen Agent Trust Hub on Jun 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected during the analysis of the skill. The instructions and scripts are focused solely on the intended purpose of generating API documentation.
- [COMMAND_EXECUTION]: The skill uses dynamic context injection (
!syntax) to execute shell commands likegrep,find, andwcat load time. These commands are used legitimately to gather project-specific metadata (API annotations, existing spec files, and dependencies) and do not involve exfiltration, sensitive file access, or unsafe handling of user input. - [PROMPT_INJECTION]: The skill includes defensive instructions to prevent the agent from interpreting embedded markdown headers or instruction patterns as operative conditions or overrides, which is a security best practice when processing user-provided code.
Audit Metadata