nemoclaw-contributor-update-docs
Pass
Audited by Gen Agent Trust Hub on Apr 14, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes several local shell commands to perform its tasks, including
git logandgit showto analyze repository history, andmake docsto build and verify the documentation. It also uses the GitHub CLI (gh pr edit) to apply labels to pull requests. These are all standard development operations within the context of a code repository. - [PROMPT_INJECTION]: The skill ingests untrusted data from git commit messages and diffs, which constitutes an indirect prompt injection surface. However, the instructions include specific logic to parse a skip list (
docs/.docs-skip) to exclude experimental features and filter out specific terms ('skip-terms') before the final documentation is drafted, which serves as a content sanitization measure.
Audit Metadata