tech-doc
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- [Prompt Injection] (SAFE): No instructions to override system prompts or bypass safety filters were found. The guidelines are strictly focused on technical writing style and documentation integrity.
- [Data Exposure & Exfiltration] (SAFE): No hardcoded credentials, sensitive file paths, or network exfiltration patterns were detected. The skill explicitly instructs to cite authoritative sources and maintain information boundaries.
- [Remote Code Execution] (SAFE): There are no patterns for downloading or executing remote scripts (e.g., curl | bash).
- [Command Execution] (SAFE): While the skill provides formatting rules for
bashandshcode blocks in documentation, it does not include commands for the agent to execute on the host system. It emphasizes providing read-only or--dry-runversions for safety. - [Obfuscation] (SAFE): No hidden or encoded content (Base64, zero-width characters, etc.) was identified in the instructions.
- [Indirect Prompt Injection] (LOW): As a documentation tool, it ingests technical data. However, it includes safety-oriented instructions such as not adding unverified conclusions and confirming information with developers before publication.
Audit Metadata