moai-docs-generation
Pass
Audited by Gen Agent Trust Hub on Mar 1, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection (Category 8).
- Ingestion points: The skill utilizes tools such as
WebFetchandmcp__context7__get-library-docsto ingest external content for processing (referenced inSKILL.md). - Boundary markers: No explicit boundary markers or "ignore embedded instructions" warnings were found in the provided code snippets or logic.
- Capability inventory: The skill possesses file-writing capabilities via the
Path.write_textmethod in theDocumentationScaffoldclass and uses theContext7Helperfor data retrieval. - Sanitization: There is no evidence of sanitization or strict schema validation for the external content before it is processed or written to files.
- [EXTERNAL_DOWNLOADS]: The skill references external resources from established and trusted services.
- It includes links to the official TypeScript documentation (
typescriptlang.org) and the Prettier GitHub repository (github.com/prettier/prettier) for style guide references. - It utilizes an internal integration library
moai_adk, which corresponds to the vendor's own infrastructure.
Audit Metadata