devdocs-requirements
Pass
Audited by Gen Agent Trust Hub on Mar 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: Analysis of the skill workflow and instructions reveals no malicious patterns or vulnerabilities. The skill uses necessary tools like Read, Write, and WebFetch to perform its primary function of documentation expansion.
- [PROMPT_INJECTION]: The skill has an indirect prompt injection surface as it processes data from external URLs and local files. Ingestion points: WebFetch for URL content and Read for file content. Boundary markers: Not specified. Capability inventory: Write, Read, Glob, and Grep are allowed, but no code execution tools like eval or subprocess are permitted. Sanitization: The instructions in context-mode.md explicitly command the agent not to write sensitive data like API keys or passwords into the documentation, reducing the risk of accidental exposure during processing.
Audit Metadata