rf-libdoc-explain
Warn
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The instructions in
SKILL.mdprovide shell commands that execute a local Python scriptscripts/rf_libdoc.py. These commands pass various arguments (--library,--keyword,--resource) to the script. - [REMOTE_CODE_EXECUTION]: The file
scripts/rf_libdoc.pydoes not contain Python source code. Instead, it contains a relative path traversal string (../../robotframework-libdoc-search/scripts/rf_libdoc.py). This technique is used to dynamically reference and execute a script located in a parent directory outside of the skill's root folder. This makes the actual logic being executed unverifiable during analysis of the skill itself.
Audit Metadata