docs-drift-guard
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes documentation source files which could potentially contain untrusted instructions. However, the workflow emphasizes deterministic checks and repository-owned tooling to validate content integrity.
- Ingestion points: Documentation source files and generated outputs mentioned in Procedure steps 1 and 2.
- Boundary markers: None explicitly mentioned in the skill instructions.
- Capability inventory: Shell execution of local binaries and running of doctests as described in Procedure steps 4 and 5.
- Sanitization: Relies on the repository's existing CI/CD process and deterministic freshness checks.
- [COMMAND_EXECUTION]: The skill involves executing the
docs-drift-checktool. The instructions specifically recommend usingnpx --no-install, which ensures the tool is run from a local binary and prevents the automatic download of unpinned versions from a registry. - [DYNAMIC_EXECUTION]: The procedure includes executing code examples and doctests embedded within the documentation to ensure freshness. These actions are performed using the repository's established testing infrastructure and pinned dependencies.
Audit Metadata