ralph-docs

Pass

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches documentation and a project map (llms.txt) from the official project website at mikeyobrien.github.io. This is a standard and safe mechanism for providing the agent with authoritative, up-to-date documentation to answer technical questions.
  • [INDIRECT_PROMPT_INJECTION]: As the skill is designed to ingest and process documentation from external Markdown files, it technically possesses an indirect prompt injection surface. However, the risk is negligible as the content is retrieved from the vendor's own trusted repository, and the instructions require the agent to provide citations and quotes for its claims.
  • [COMMAND_EXECUTION]: The skill provides guidance for common development tasks, including running the project's test suite (cargo test) and installing locally built binaries. These commands are standard for a technical contribution workflow and do not involve suspicious privilege escalation or hidden execution patterns.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 18, 2026, 04:41 AM