catalog-documentation-creator
Pass
Audited by Gen Agent Trust Hub on Mar 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
npx @eventcatalog/create-eventcatalog@latestto bootstrap new documentation projects. This command executes the official scaffolding tool provided by the vendor. - [EXTERNAL_DOWNLOADS]: The
npxcommand downloads the latest version of the creator tool from the public NPM registry. This is standard behavior for the intended purpose and targets a vendor-owned package. - [SAFE]: The skill includes documentation templates that contain example code (Python, Shell, JSON) and placeholders for credentials (e.g.,
YOUR_AZURE_SERVICE_BUS_CONNECTION_STRING). These are static examples for the generated documentation and do not represent active code execution or credential exposure by the agent.
Audit Metadata