rspress-docs-generator
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
pnpm create rspress@latestandnpx -y create-rspress@latestto scaffold documentation projects. These commands fetch the official Rspress scaffolding tool from the npm registry. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted project data to generate documentation, creating a potential surface for indirect prompt injection.
- Ingestion points: The skill reads root
README.md,package.json, source code files, PR titles, PR descriptions, and git diffs (references/create-new-docs.md,references/maintain-docs-for-prs.md). - Boundary markers: There are no explicit instructions or delimiters provided to the agent to treat this external content as untrusted or to ignore embedded instructions.
- Capability inventory: The skill has the capability to execute shell commands (e.g.,
pnpm install,pnpm run build) and write files to the local file system. - Sanitization: No sanitization or validation of the ingested external content is mentioned.
- [COMMAND_EXECUTION]: The skill executes shell commands via package managers (npm, pnpm, yarn, bun) to manage dependencies and run documentation builds as part of its normal operation.
Audit Metadata