code-documenter
Pass
Audited by Gen Agent Trust Hub on Feb 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: Analysis of the skill instructions and reference materials confirms the skill's primary focus is on technical writing and documentation automation. No evidence of malicious prompt injection or behavior override was found.
- [EXTERNAL_DOWNLOADS]: The reference files include instructions for installing standard documentation utilities and dependencies such as pydocstyle, eslint-plugin-jsdoc, and interrogate. These references point to well-known, legitimate software packages from official registries.
- [COMMAND_EXECUTION]: The skill provides instructional snippets for common development tasks, such as initializing documentation sites with Docusaurus or running documentation linters. These are standard developer workflows and are treated as examples for the user rather than automated malicious execution.
- [DATA_EXPOSURE]: No evidence of hardcoded credentials, sensitive file access (e.g., SSH keys or environment files), or unauthorized data exfiltration was detected. Network operations mentioned are limited to standard documentation site deployment and analytics integration (e.g., Algolia search, Google Analytics).
Audit Metadata