soia-dev-doc-sync

Pass

Audited by Gen Agent Trust Hub on Jul 22, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions to install components from the vendor's official repository (soia-team/soia-open-dev-coding-skills) using the npx package runner.\n- [COMMAND_EXECUTION]: Instructs the agent to run existing project-specific tools such as lints, tests, or documentation generators. These executions are scoped to the project's own environment and are intended to verify facts before synchronization.\n- [DATA_EXFILTRATION]: Reads repository files to identify drift between source code and documentation. The skill includes specific security boundaries to prevent sensitive information—such as credentials, private workspace paths, or internal organizational processes—from being written into public-facing documentation.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 22, 2026, 01:40 PM
Security Audit — agent-trust-hub — soia-dev-doc-sync