documentation-writing
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- COMMAND_EXECUTION (SAFE): The
generator.pymodule executesmkdocsandamplihackviasubprocess.run. The implementation follows security best practices by using list-formatted arguments instead of shell strings, which prevents command injection. It also implements timeouts and captures output for error handling. - EXTERNAL_DOWNLOADS (SAFE): The documentation refers to well-known, trusted Python packages (
mkdocs,mkdocs-material,pyyaml). No automated installation of untrusted or remote scripts was found in the code. - SAFE (SAFE): The skill restricts its operations to standard documentation paths (
docs/,site/). It discovers markdown files and correctly handles project metadata without attempting to access sensitive system files, environment variables, or hardcoded credentials.
Audit Metadata