Skip to main content

doc-governance-skill

Enforces documentation governance by assessing code changes and routing updates to the appropriate documents, ensuring clarity and compliance.

Install this skill

or
90/100

Security score

The doc-governance-skill skill was audited on Aug 7, 2026 and we found 6 security issues across 2 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

low line 207

Command substitution pattern

SourceSKILL.md
205
206 ```bash
207 ROOT=$(find ~/.claude/plugins/cache/*/doc-governance-skill -name 'SKILL.md' -not -path '*/node_modules/*' 2>/dev/null | head -1 | xargs -r dirname)
208 [ -n "$ROOT" ] || ROOT=~/.claude/skills/doc-governance-skill
209 SKILL_ROOT=$(node "$ROOT/bin/which.js" 2>/dev/null) || SKILL_ROOT=$ROOT
low line 209

Command substitution pattern

SourceSKILL.md
207 ROOT=$(find ~/.claude/plugins/cache/*/doc-governance-skill -name 'SKILL.md' -not -path '*/node_modules/*' 2>/dev/null | head -1 | xargs -r dirname)
208 [ -n "$ROOT" ] || ROOT=~/.claude/skills/doc-governance-skill
209 SKILL_ROOT=$(node "$ROOT/bin/which.js" 2>/dev/null) || SKILL_ROOT=$ROOT
210 ```
211
low line 289

Command substitution pattern

SourceSKILL.md
287git diff --name-only <sealed-sha> \
288 | xargs -I{} basename {} \
289 | while read f; do grep -l "$f" $(git ls-files '*.md') 2>/dev/null; done \
290 | sort -u
291```
medium line 140

Access to home directory dotfiles

SourceSKILL.md
138```
139
140Path note: the command assumes the skill installed at `.ai/skills/doc-governance-skill/` (per-repo default from `install.sh`). Adjust to `~/.claude/skills/doc-governance-skill/bin/…` for a global install, or wherever the skill lives in your setup.
141
142Behavior:
low line 207

Access to home directory dotfiles

SourceSKILL.md
205
206 ```bash
207 ROOT=$(find ~/.claude/plugins/cache/*/doc-governance-skill -name 'SKILL.md' -not -path '*/node_modules/*' 2>/dev/null | head -1 | xargs -r dirname)
208 [ -n "$ROOT" ] || ROOT=~/.claude/skills/doc-governance-skill
209 SKILL_ROOT=$(node "$ROOT/bin/which.js" 2>/dev/null) || SKILL_ROOT=$ROOT
low line 208

Access to home directory dotfiles

SourceSKILL.md
206 ```bash
207 ROOT=$(find ~/.claude/plugins/cache/*/doc-governance-skill -name 'SKILL.md' -not -path '*/node_modules/*' 2>/dev/null | head -1 | xargs -r dirname)
208 [ -n "$ROOT" ] || ROOT=~/.claude/skills/doc-governance-skill
209 SKILL_ROOT=$(node "$ROOT/bin/which.js" 2>/dev/null) || SKILL_ROOT=$ROOT
210 ```
Scanned on Aug 7, 2026
View Security Dashboard
Installation guide →
Rating
5.01
Rate this skill
Categorycontent media
UpdatedAugust 21, 2026
claudefrontenddesigndocxgitapidatabasetestingdevopsmobiletechnical-writerdevops-srebackend-developerproduct-managerproject-managercontent mediadevelopmentproductproject management
NANDI-Services/doc-governance-skill