using-technical-writer

Pass

Audited by Gen Agent Trust Hub on Feb 25, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: A thorough review of all 9 markdown files confirms that the skill consists solely of documentation templates and routing instructions without any malicious code or hidden logic.
  • [COMMAND_EXECUTION]: The skill provides templates for runbooks and READMEs that include shell commands like kubectl, systemctl, and pg_dump. These are clearly documented as static examples for the user's reference and are not intended for execution by the agent.
  • [REMOTE_CODE_EXECUTION]: Documentation templates in documentation-testing.md and incident-response-documentation.md contain curl | bash examples. These target the reserved example.com domain, ensuring they are safe for documentation purposes.
  • [CREDENTIALS_UNSAFE]: Numerous examples of API keys, JWT tokens, and passwords are present in the templates. The skill adheres to the best practice of using obviously fake credentials (e.g., fake_api_key_abc123_for_docs_only) and reserved documentation domains to prevent accidental exposure.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 25, 2026, 04:05 AM