specsfy-documentator
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions direct the agent to execute a local Node.js script (
scripts/build_documentation.mjs) to automate the generation of technical documentation and package inventories. - [DATA_EXPOSURE]: The skill reads local project manifests (package.json, composer.json) and source code files to build documentation. It contains explicit guardrails prohibiting the collection of sensitive environment variables (.env), production secrets, or entire blocks of source code.
- [SAFE]: The execution environment is limited to local file system operations (read/write). The included script uses only native Node.js modules (
node:fs,node:path) and does not perform any external network requests or downloads.
Audit Metadata