docs-drift-guard

Pass

Audited by Gen Agent Trust Hub on Oct 8, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes documentation source files which could potentially contain untrusted instructions. However, the workflow emphasizes deterministic checks and repository-owned tooling to validate content integrity.
  • Ingestion points: Documentation source files and generated outputs mentioned in Procedure steps 1 and 2.
  • Boundary markers: None explicitly mentioned in the skill instructions.
  • Capability inventory: Shell execution of local binaries and running of doctests as described in Procedure steps 4 and 5.
  • Sanitization: Relies on the repository's existing CI/CD process and deterministic freshness checks.
  • [COMMAND_EXECUTION]: The skill involves executing the docs-drift-check tool. The instructions specifically recommend using npx --no-install, which ensures the tool is run from a local binary and prevents the automatic download of unpinned versions from a registry.
  • [DYNAMIC_EXECUTION]: The procedure includes executing code examples and doctests embedded within the documentation to ensure freshness. These actions are performed using the repository's established testing infrastructure and pinned dependencies.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 8, 2026, 09:45 PM