docs-sync
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- Command Execution: The skill includes a validation step that runs
pnpm buildwithin thedocsdirectory. This is a standard procedure for verifying documentation integrity in modern web development workflows. - Indirect Prompt Injection Surface: The skill processes external information (source code changes) to update documentation. This introduces a potential surface where specifically formatted content in the code could influence the agent's output. (1) Ingestion points: Source code changes and project files such as
crates/webui-cli/src/commands/. (2) Boundary markers: Not explicitly defined in the instructions. (3) Capability inventory: File system write access for documentation and command execution viapnpm build. (4) Sanitization: Not explicitly performed on source code content before documentation updates.
Audit Metadata