devvit-docs

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches documentation content from the official reddit/devvit-docs GitHub repository.
  • [COMMAND_EXECUTION]: The ensure-docs.cjs script executes git commands locally using execFileSync to perform cloning, pulling, and sparse checkout management for the documentation cache.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external Markdown and MDX content from a remote repository, creating an ingestion surface where instructions embedded in the documentation could potentially influence agent behavior.
  • Ingestion points: Documentation is cloned from https://github.com/reddit/devvit-docs.git into a local cache directory (typically .cache/devvit-skills/devvit-docs).
  • Boundary markers: Instructions require the agent to use the repository as the sole source of truth and to cite specific files and sections relative to the repository root.
  • Capability inventory: The skill executes git subprocesses via a Node.js script and uses text-search tools like rg (ripgrep) to query the downloaded files.
  • Sanitization: No explicit sanitization or filtering is applied to the content of the Markdown files before they are read and processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 02:53 AM