documentation-lookup
Pass
Audited by Gen Agent Trust Hub on Mar 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill demonstrates security awareness by explicitly instructing the agent to redact sensitive data, such as API keys and tokens, from queries before they are transmitted to the external Context7 documentation service.
- [PROMPT_INJECTION]: The skill has a surface for indirect prompt injection because it processes content retrieved from an external API (Context7 documentation snippets).
- Ingestion points: Documentation content retrieved via the
query-docstool output. - Boundary markers: No specific delimiters or markers are defined to isolate external documentation from the agent's instructions.
- Capability inventory: The skill does not possess any high-risk capabilities such as file system writes, shell command execution, or unrestricted network access.
- Sanitization: The skill performs sanitization on outgoing data (redacting secrets) but does not define sanitization or validation for incoming documentation content.
Audit Metadata