inline-doc-governance
Pass
Audited by Gen Agent Trust Hub on May 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a well-structured documentation linter. All components, including the Python audit script and reference documentation, are focused on repository governance and pose no security threat.
- [COMMAND_EXECUTION]: The script
scripts/test_audit_inline_docs.pyutilizessubprocess.runto invoke the local audit script for testing purposes. This usage is restricted to hardcoded test cases and temporary file paths, representing standard software verification practices. - [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface as it ingests and analyzes source code from the user's repository.
- Ingestion points: Source files (.ts, .js, .swift) are read via
scripts/audit_inline_docs.py. - Boundary markers: Absent.
- Capability inventory: The skill can modify file content through its
--fixflag or via the AI agent's file-write operations. - Sanitization: Logic is restricted to syntax-based regex matching for documentation patterns.
- Assessment: This is a characteristic of any tool designed to audit project code and is considered a low, acceptable risk in this context.
Audit Metadata