writing-skills
Warn
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: MEDIUMPROMPT_INJECTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTIONMETADATA_POISONING
Full Analysis
- [PROMPT_INJECTION]: The
persuasion-principles.mdfile explicitly advocates for the use of "Authority" and "Commitment" principles to bypass agent "decision fatigue and rationalization." It instructs the use of imperative language like "YOU MUST," "Never," and "No exceptions" to enforce compliance, which are techniques commonly used to override an agent's internal reasoning or safety filters. - [COMMAND_EXECUTION]: The
render-graphs.jsscript usesexecSyncto call the system commanddot. It extracts Graphviz DSL content fromSKILL.mdand passes it as input to thedotutility. Executing system binaries on content extracted from markdown files poses a risk if the file content is maliciously crafted. - [DYNAMIC_EXECUTION]: The skill includes a Node.js utility,
render-graphs.js, which dynamically extracts and compiles Graphviz code at runtime to generate SVG files. This involves executing external processes based on document content. - [METADATA_POISONING]: The
persuasion-principles.mdfile cites a research paper, "Meincke et al. (2025)," describing large-scale AI compliance testing. This appears to be a future-dated or fabricated reference used to provide a false sense of authority and legitimacy to the psychological manipulation techniques recommended in the skill.
Audit Metadata