docs
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands (
bun i,bun run build,bun run start) to prepare the local environment and launch the documentation server. These are standard developer operations for JS/TS projects. - [INDIRECT_PROMPT_INJECTION]: The agent is instructed to read the output of the local server process to determine the served URL. This is a common pattern for local development skills and presents a minimal attack surface within the local execution context.
- [SAFE]: All identified operations are aligned with the skill's stated purpose of managing local documentation and follow typical development workflows.
Audit Metadata