skills/microsoft/webui/docs-sync/Gen Agent Trust Hub

docs-sync

Pass

Audited by Gen Agent Trust Hub on Sep 28, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • Command Execution: The skill includes a validation step that runs pnpm build within the docs directory. This is a standard procedure for verifying documentation integrity in modern web development workflows.
  • Indirect Prompt Injection Surface: The skill processes external information (source code changes) to update documentation. This introduces a potential surface where specifically formatted content in the code could influence the agent's output. (1) Ingestion points: Source code changes and project files such as crates/webui-cli/src/commands/. (2) Boundary markers: Not explicitly defined in the instructions. (3) Capability inventory: File system write access for documentation and command execution via pnpm build. (4) Sanitization: Not explicitly performed on source code content before documentation updates.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 28, 2026, 03:52 PM