interface-data-doc-generator
Pass
Audited by Gen Agent Trust Hub on Mar 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/validate_protobuf.pyutilizessubprocess.runto call the system'sprotoccompiler. This is a functional requirement for validating Protobuf syntax and is implemented using a list of arguments to prevent shell injection.- [PROMPT_INJECTION]: As the skill is designed to process user-provided architecture documents and technical schemas, it possesses an indirect prompt injection surface. - Ingestion points: Technical requirements and architecture descriptions processed during the 'Document Generation' workflow.
- Boundary markers: None explicitly defined to separate data from instructions.
- Capability inventory: The skill executes local Python scripts and can read/write documentation files.
- Sanitization: Validation is limited to file format syntax (YAML, SQL, Proto) and does not include sanitization for embedded LLM instructions.- [EXTERNAL_DOWNLOADS]: The skill references standard Python dependencies (
pyyaml,jsonschema,protobuf) required for its validation scripts. These are well-known packages from the official Python Package Index (PyPI).
Audit Metadata