project-docs
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The instructions suggest the use of shell commands such as
git rev-parse --short HEADto record the project version and various build commands (e.g.,make,npm build) to document how to compile the project. These commands are intended to be executed within the context of project analysis and documentation, and the results are presented to the user. - [DATA_EXPOSURE]: The skill performs extensive reading of local project files to build a 'project map' (
.project-map.md). This process is confined to the user-provided project directory for the purpose of technical documentation and does not target system-level sensitive paths like SSH keys or environment secrets. - [INDIRECT_PROMPT_INJECTION]: The skill possesses an ingestion surface by reading untrusted source code from the user's project. While this could theoretically be used to influence the documentation output, the skill mitigates this by using highly structured templates, specific quality checklists, and instructions for the agent to verify code snippets against the file system before inclusion.
Audit Metadata