docs-audit
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill reads and processes documentation files and source code to perform audits and build evaluation projects. This creates a surface where instructions or code examples embedded in the documentation could influence the agent's behavior during the audit or while scaffolding and running the evaluation code.
- Ingestion points: Documentation files under
docs/src/content/en/and source files resolved during the audit process (SKILL.md). - Boundary markers: No explicit delimiters or instructions to ignore embedded commands are used when reading documentation content.
- Capability inventory: Shell script execution, file system operations, and package installation/execution via
pnpm(scripts/eval-setup.sh, scripts/run-checks.sh). - Sanitization: The skill lacks sanitization for documentation content before it is used to create and configure evaluation projects.
- [COMMAND_EXECUTION]: The skill executes multiple internal shell scripts that interact with the system and project-specific development tools.
- Evidence: The skill invokes scripts like
init-run.sh,run-checks.sh, andformat-doc.shwhich execute CLI tools includingpnpm,mkdir,cp,remark, andoxfmt-mdx. - [DYNAMIC_EXECUTION]: The skill dynamically generates configuration files and project structures to test documentation examples in isolated environments.
- Evidence:
scripts/eval-setup.shprogrammatically createspackage.json,tsconfig.json, andpnpm-workspace.yamlfiles at runtime and then executespnpm installandtscto verify the generated project.
Audit Metadata