code-documenter
Fail
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: CRITICALINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes source code files to generate and validate documentation, creating a surface for indirect prompt injection if the code contains malicious instructions within comments or docstrings.
- Ingestion points: The skill reads source code files during the 'Analyze' and 'Document' phases as defined in the
SKILL.mdworkflow. - Boundary markers: There are no explicit instructions to the agent to disregard or escape natural language instructions found within the code being documented.
- Capability inventory: The skill possesses the capability to write to the filesystem (generating documentation) and execute local commands through the validation step.
- Sanitization: No sanitization of code examples is performed before they are passed to validation tools.
- [DYNAMIC_EXECUTION]: The workflow incorporates automated testing of documentation examples, which involves executing code snippets at runtime.
- Evidence:
SKILL.mdspecifies the use ofpython -m doctestandpytest --doctest-modulesto verify that examples in docstrings are functional and produce expected results. - [COMMAND_EXECUTION]: The skill utilizes several standard development and documentation tools via the command line for linting and validation.
- Evidence:
SKILL.mdandreferences/coverage-reports.mdinclude instructions to runtsc --noEmit,npx @redocly/cli lint,pydocstyle, andinterrogate. - [EXTERNAL_DOWNLOADS]: The skill references documentation and configuration files from external sites and well-known service providers.
- Evidence:
SKILL.mdprovides a link tohttps://jeffallan.github.io/claude-skills/skills/quality/code-documenter/for further documentation. - Evidence:
references/documentation-systems.mdandreferences/interactive-api-docs.mdinclude script tags and links for external libraries such as Algolia (cdn.jsdelivr.net) and Redocly (cdn.redoc.ly) to support documentation search and portal functionality.
Recommendations
- CRITICAL: 1 file(s) identified as malware by FileRep - DO NOT USE
- Contains 2 malicious URL(s) - DO NOT USE
Audit Metadata