docs-skill-builder
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill is designed to fetch documentation from external sources using
git clonefor repositories andcurlfor web-based documentation. These operations are initiated by the operator to populate a local documentation mirror. - [COMMAND_EXECUTION]: The skill utilizes shell scripts (
create-docs-skill.shand a generatedgenerate-docs-skill.sh) to automate the scaffolding and updating of documentation skills. These scripts perform standard file system operations, such as creating directories, copying files, and generating hash manifests for verification. - [INDIRECT_PROMPT_INJECTION]: The skill implements a proactive 'neutralization' strategy to mitigate risks associated with ingesting untrusted external data. Mirrored files that match common instruction or configuration patterns (e.g.,
SKILL.md,Dockerfile,package.json, and various agent instruction files likeAGENTS.md) are automatically renamed with a.sourcesuffix. This prevents the agent's platform from accidentally discovering or interpreting these files as active instructions or configuration. Additionally, the generated skill includes explicit warnings to treat mirrored content as untrusted. - [DYNAMIC_EXECUTION]: The documentation mirroring script uses an embedded Python one-liner to perform text normalization for consistency checks. The Python code is static, utilizes the standard library, and operates on local files within the mirroring process.
Audit Metadata