get-api-docs
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes documentation from external community sources (chub) and public vendor websites to inform code generation and project modifications. This creates a surface where malicious instructions embedded in third-party documentation could influence the agent's actions. * Ingestion points: External documentation content fetched from community repositories (chub) and vendor URLs. * Boundary markers: The instructions require verification of documentation against actual SDK behavior and project constraints to prevent mechanical copying. * Capability inventory: The agent can modify project source code, update dependencies, and execute local verification scripts. * Sanitization: No specific content sanitization or filtering of documentation text is defined.
- [COMMAND_EXECUTION]: The skill's workflow involves executing local shell commands to verify API usage, such as running import checks, type checks, and minimal API smoke tests.
- [EXTERNAL_DOWNLOADS]: The skill is designed to perform network operations to retrieve documentation from various external vendor domains and community platforms.
Audit Metadata