devvit-docs
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches documentation content from the official
reddit/devvit-docsGitHub repository. - [COMMAND_EXECUTION]: The
ensure-docs.cjsscript executesgitcommands locally usingexecFileSyncto perform cloning, pulling, and sparse checkout management for the documentation cache. - [INDIRECT_PROMPT_INJECTION]: The skill processes external Markdown and MDX content from a remote repository, creating an ingestion surface where instructions embedded in the documentation could potentially influence agent behavior.
- Ingestion points: Documentation is cloned from
https://github.com/reddit/devvit-docs.gitinto a local cache directory (typically.cache/devvit-skills/devvit-docs). - Boundary markers: Instructions require the agent to use the repository as the sole source of truth and to cite specific files and sections relative to the repository root.
- Capability inventory: The skill executes
gitsubprocesses via a Node.js script and uses text-search tools likerg(ripgrep) to query the downloaded files. - Sanitization: No explicit sanitization or filtering is applied to the content of the Markdown files before they are read and processed by the agent.
Audit Metadata