zig-docs
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS] (SAFE): The skill retrieves documentation and source code from legitimate and well-known domains, specifically ziglang.org and github.com.
- [COMMAND_EXECUTION] (SAFE): It utilizes standard command-line tools such as curl, pandoc, grep, jq, and head for its primary documentation fetching purpose.
- [PROMPT_INJECTION] (LOW): There is a potential surface for indirect prompt injection because the skill fetches untrusted data from external web sources. 1. Ingestion points: Documentation and source files retrieved from GitHub and ziglang.org. 2. Boundary markers: None present in the instructions. 3. Capability inventory: curl (network), pandoc, grep, jq (text processing). 4. Sanitization: No sanitization or validation of the fetched content is performed.
Audit Metadata