documentation-writing

Pass

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • COMMAND_EXECUTION (SAFE): The generator.py module executes mkdocs and amplihack via subprocess.run. The implementation follows security best practices by using list-formatted arguments instead of shell strings, which prevents command injection. It also implements timeouts and captures output for error handling.
  • EXTERNAL_DOWNLOADS (SAFE): The documentation refers to well-known, trusted Python packages (mkdocs, mkdocs-material, pyyaml). No automated installation of untrusted or remote scripts was found in the code.
  • SAFE (SAFE): The skill restricts its operations to standard documentation paths (docs/, site/). It discovers markdown files and correctly handles project metadata without attempting to access sensitive system files, environment variables, or hardcoded credentials.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 17, 2026, 06:15 PM