compound-docs
Pass
Audited by Gen Agent Trust Hub on May 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill performs shell command execution to manage the documentation lifecycle.
- Executes
scripts/validate-frontmatter.shto validate YAML headers against a schema. - Uses
grepto search existing documentation for similar issues. - Uses
mkdir -p,echo, andcatto create and update files in thedocs/solutions/directory. - [PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection due to the way it processes and stores conversation content.
- Ingestion points: Extracts module names, error messages, and investigation details from the conversation history in
references/documentation-process.md(Step 2). - Boundary markers: Content is interpolated into documentation templates without explicit boundary markers or instructions to disregard potential commands in the source data.
- Capability inventory: The workflow involves file-write capabilities (
echo,cat) and local script execution (bash). - Sanitization: Filenames are sanitized for length and special characters; YAML metadata is validated using a regex-based bash script.
Audit Metadata