writing-skills

Pass

Audited by Gen Agent Trust Hub on Jul 9, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is a developer-oriented guide for authoring skills. Its primary components are instructional markdown files and a utility script.
  • [COMMAND_EXECUTION]: The script render-graphs.js uses child_process.execSync to invoke the system's dot command (Graphviz). This is a legitimate use case for rendering diagrams found in skill documentation. The script passes diagram data via standard input, which is a secure method that prevents common shell injection vulnerabilities.
  • [EXTERNAL_DOWNLOADS]: The documentation mentions common third-party libraries such as pdfplumber, pypdf, and pytesseract as examples for use in other skills, but this skill does not automate their installation or perform any unverified downloads.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 9, 2026, 06:31 PM
Security Audit — agent-trust-hub — writing-skills