skills/qzaixh/codestable/cs-libdoc/Gen Agent Trust Hub

cs-libdoc

Pass

Audited by Gen Agent Trust Hub on Jun 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [PROMPT_INJECTION]: Potential Indirect Prompt Injection Surface. The skill analyzes source code files which may contain untrusted data. Ingestion points: Project source files defined in the manifest. Boundary markers: Absent. The skill lacks explicit delimiters or instructions to ignore embedded commands during extraction. Capability inventory: Local script execution and file writing to the project directory. Sanitization: Not specified.
  • [COMMAND_EXECUTION]: Local Utility Usage. The skill instructs the agent to execute specific Python utilities for internal workflow management. Evidence: Calls validate-yaml.py to verify YAML integrity in the manifest and documentation files. Evidence: Uses search-yaml.py to filter and manage documentation entries based on status. These tools are consistent with the skill's purpose and the author's development framework.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 15, 2026, 04:39 AM