review-mintlify-docs
Pass
Audited by Gen Agent Trust Hub on Aug 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
mintdocumentation CLI tool (includingvalidate,broken-links,dev, anda11ysubcommands) and performsgitcommits. These operations are standard for a documentation audit and maintenance tool. \n- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user-provided documentation files (MDX and JSON) which could contain malicious instructions. The presence of file-writing and command-execution capabilities creates a potential injection surface. \n - Ingestion points: The agent reads the documentation navigation file (
docs.json) and individual MDX page files from the project directory. \n - Boundary markers: Absent; there are no instructions to use delimiters or specific warnings to ignore embedded instructions within the documentation files being reviewed. \n
- Capability inventory: The skill can perform file-system writes (
editcommand) and execute shell commands (mintCLI,git commit). \n - Sanitization: Absent; the skill does not specify any filtering or escaping of the content read from the documentation files before processing it.
Audit Metadata