rf-libdoc-explain

Warn

Audited by Gen Agent Trust Hub on Mar 29, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The instructions in SKILL.md provide shell commands that execute a local Python script scripts/rf_libdoc.py. These commands pass various arguments (--library, --keyword, --resource) to the script.
  • [REMOTE_CODE_EXECUTION]: The file scripts/rf_libdoc.py does not contain Python source code. Instead, it contains a relative path traversal string (../../robotframework-libdoc-search/scripts/rf_libdoc.py). This technique is used to dynamically reference and execute a script located in a parent directory outside of the skill's root folder. This makes the actual logic being executed unverifiable during analysis of the skill itself.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 29, 2026, 02:32 PM