Scan Report
0 /100
docs-refresh
Refresh authoritative docs through a routed progressive-disclosure workflow
A benign documentation-refresh workflow skill that uses bash/git to analyze repository changes and route to appropriate doc-maintenance modes.
Safe to install
No action needed. The skill is safe to use.
| Resource | Declared | Inferred | Status | Evidence |
|---|---|---|---|---|
| Shell | WRITE | WRITE | ✓ Aligned | SKILL.md: 'run the collector' + manual routing fallback mentions 'shell executio… |
| Filesystem | READ | READ | ✓ Aligned | SKILL.md: reads git status, diffs, untracked files; explicitly says 'Do not stag… |
| Network | NONE | NONE | — | No network activity in any script |
| Environment | NONE | NONE | — | No environment variable access in scripts |
| Clipboard | NONE | NONE | — | No clipboard access |
| Browser | NONE | NONE | — | No browser access |
| Database | NONE | NONE | — | No database access |
| Skill Invoke | NONE | NONE | — | No cross-skill invocation |
File Tree
9 files · 30.2 KB · 831 lines Shell 3f · 645L
Markdown 5f · 182L
YAML 1f · 4L
├─
▾
agents
│ └─
openai.yaml
YAML
├─
▾
modes
│ ├─
bootstrap.md
Markdown
│ ├─
minimal.md
Markdown
│ ├─
repair.md
Markdown
│ └─
structured.md
Markdown
├─
▾
scripts
│ ├─
collect_changed_context.sh
Shell
│ ├─
test_collect_changed_context_routing.sh
Shell
│ └─
test_skill_fallback_contract.sh
Shell
└─
SKILL.md
Markdown
Security Positives
✓ Shell execution via bash/git is declared in SKILL.md and is necessary for the core git analysis feature
✓ SKILL.md explicitly prohibits staging or committing ('Do not stage or commit anything')
✓ No credential harvesting, no sensitive path access (~/.ssh, ~/.aws, .env)
✓ No network requests, no external IP connections
✓ No base64/encoded payloads, no eval, no curl|bash patterns
✓ Scripts only perform read-only git operations (status, diff, ls-files)
✓ Test scripts use isolated temp directories with mktemp and trap cleanup
✓ No dependency files (requirements.txt, package.json) that could introduce supply-chain risk
✓ All functionality is self-contained and focused on documentation classification