writing-skills

Pass

Audited by Gen Agent Trust Hub on Sep 23, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The utility render-graphs.js executes the system's dot command using child_process.execSync to generate SVG diagrams.
  • [EXTERNAL_DOWNLOADS]: Installation instructions for the graphviz dependency refer to trusted system package managers (brew and apt).
  • [INDIRECT_PROMPT_INJECTION]: The skill methodology processes markdown content to extract Graphviz code. Ingestion points: render-graphs.js reads SKILL.md. Boundary markers: markdown triple backticks. Capability inventory: execSync and file system access. Sanitization: none.
  • [PROMPT_INJECTION]: The skill employs authoritative language and psychological principles ('YOU MUST', 'No exceptions') to enforce the TDD workflow, which is a functional process requirement rather than an attempt to circumvent safety filters.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 23, 2026, 12:36 AM