doc-smith-check
Pass
Audited by Gen Agent Trust Hub on Mar 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a legitimate utility for document integrity validation. All file system operations are scoped to the
.aigne/doc-smithdirectory relative to the current workspace.\n- [COMMAND_EXECUTION]: The skill executes internal Node.js scripts to automate document structure checks. It includes functionality to delete unrecognized folders and files within the project's documentation directory to ensure consistency with the defined structure.\n- [EXTERNAL_DOWNLOADS]: The skill performs network requests (HTTP HEAD) to verify the accessibility of remote images referenced in the documentation. These operations are limited to status checks and do not retrieve or execute external payloads.\n- [SAFE]: Indirect prompt injection (Category 8) surface analysis:\n - Ingestion points: Reads configuration from
planning/document-structure.yaml,.meta.yaml, and processed content from MD and HTML files.\n - Boundary markers: Absent (uses structured YAML and HTML parsing).\n
- Capability inventory: Includes file deletion (
rm) inscripts/clean-invalid-docs.mjsand network accessibility checks (fetch) inscripts/validate-content.mjs.\n - Sanitization: Implements path traversal checks in
scripts/utils.mjs(rejecting paths containing..) to restrict file operations to the intended workspace.
Audit Metadata