ship-workflow-doc-sync
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
git diff-treecommand to identify files changed in a specific commit or merge. This is a standard operation for a development tool designed to synchronize documentation with project code changes. - [INDIRECT_PROMPT_INJECTION]: The skill processes content from the project's repository, including source code and configuration files, to automatically update project documentation. This ingestion of data from the codebase represents a potential attack surface.
- Ingestion points: Git commit history and project files (README.md, CLAUDE.md, etc.) are read to identify factual changes.
- Boundary markers: The skill does not explicitly specify delimiters to separate untrusted repository content from its internal prompt logic during processing.
- Capability inventory: The skill has permissions to read and write local files and execute git commands.
- Sanitization: No explicit sanitization or filtering of the extracted data is described before it is used to modify the project's documentation.
Audit Metadata