docs-site
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a Python script
scripts/check_pages_setup.pythat executes localgitcommands to verify the repository configuration. - Evidence: The script uses
subprocess.runto callgit remote get-url,git rev-parse,git ls-remote, andgit ls-tree. These commands are executed withoutshell=Trueand are used exclusively for diagnostic purposes to ensure the repository is correctly configured for GitHub Pages deployment. - [INDIRECT_PROMPT_INJECTION]: The skill processes external repository data (workflows and configuration files), which constitutes a potential surface for indirect prompt injection.
- Ingestion points:
scripts/check_pages_setup.pyreads content from GitHub Actions workflow files and static site generator configuration files (such asmkdocs.yml,docusaurus.config.js, etc.). - Capability inventory: The script's capabilities are limited to reading local files and executing local
gitcommands for diagnostic analysis. - Boundary markers: No explicit boundary markers are present in the script's reading logic.
- Sanitization: The script employs specific regular expressions to extract configuration values, which inherently restricts the data processed to expected patterns and mitigates the risk of processing arbitrary malicious instructions.
Audit Metadata