adding-api-docs
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides standard command-line instructions for installing development dependencies through
npm install. - [EXTERNAL_DOWNLOADS]: The skill fetches well-known and reputable packages from the official npm registry for API documentation generation.
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the parsing of user-controlled source code and annotations, which creates a surface for potential indirect prompt injection during documentation generation. 1. Ingestion points: Application route handlers and JSDoc comments identified in
SKILL.md. 2. Boundary markers: None present. 3. Capability inventory: Command execution vianpm. 4. Sanitization: Not specified for the code analysis process.
Audit Metadata