writing-skills
Pass
Audited by Gen Agent Trust Hub on Jul 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a developer-oriented guide for authoring skills. Its primary components are instructional markdown files and a utility script.
- [COMMAND_EXECUTION]: The script
render-graphs.jsuseschild_process.execSyncto invoke the system'sdotcommand (Graphviz). This is a legitimate use case for rendering diagrams found in skill documentation. The script passes diagram data via standard input, which is a secure method that prevents common shell injection vulnerabilities. - [EXTERNAL_DOWNLOADS]: The documentation mentions common third-party libraries such as
pdfplumber,pypdf, andpytesseractas examples for use in other skills, but this skill does not automate their installation or perform any unverified downloads.
Audit Metadata