cs-libdoc
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local Python scripts, specifically
validate-yaml.pyandsearch-yaml.py, to validate YAML formatting and manage documentation status in a manifest. These tools are used to ensure consistency across generated files. - [PROMPT_INJECTION]: The skill processes source code to generate documentation, creating a surface for indirect prompt injection if the source files contain malicious instructions hidden in comments or metadata. The analysis of this attack surface follows:
- Ingestion points: Source code files identified during directory scanning and read during the documentation generation phase.
- Boundary markers: No explicit delimiters or instructions to ignore embedded commands are specified for the source code extraction process.
- Capability inventory: The skill has the ability to execute shell commands (Python scripts) and write files to the project's documentation directory.
- Sanitization: No filtering or sanitization steps are defined for content extracted from source code.
Audit Metadata