docs
Pass
Audited by Gen Agent Trust Hub on Jun 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill makes extensive use of shell commands through the Bash tool and generated Makefiles. It executes commands for repository structure auditing (git log), site building (pnpm/astro), and deployment (rsync).
- [EXTERNAL_DOWNLOADS]: During the scaffolding and publishing phases, the skill instructs the agent to use pnpm/npm to install dependencies. These include well-known packages such as @astrojs/starlight and Astro from the official npm registry.
- [DATA_EXFILTRATION]: The skill generates deployment configurations (Makefile) that utilize rsync to transfer documentation artifacts from the local
site/dist/directory to a user-defined remote VPS host. This is a standard operation for documentation publishing. - [PROMPT_INJECTION]: The
/docs review-draftssubcommand implements an indirect prompt injection surface. It employs sub-agents to read untrusted project data and verify documentation accuracy. - Ingestion points: Project source code located in
backend/,app/, andsrc/directories, as well asCHANGELOG.mdfiles. - Boundary markers: None identified; sub-agents are directly exposed to raw file content.
- Capability inventory: Sub-agents are explicitly granted the capability to modify documentation files using the
Edittool based on their analysis of the ingested code. - Sanitization: No sanitization or validation of the repository content is performed before it is processed by the sub-agents.
Audit Metadata