puzzletide-crossword
Pass
Audited by Gen Agent Trust Hub on Aug 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
ptideandpuzzletideCLI tools to generate grids, list themed words, and create PDF output. It executes these tools locally using provided word lists and configuration files. - [EXTERNAL_DOWNLOADS]: The skill references the
puzzletidepackage available on npm. It includes instructions to install the package globally (npm install -g puzzletide) if the binary is not found in the local environment. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data in the form of word/clue lists provided via the
--wordsargument or external JSON files (--file). - Ingestion points: Data enters the system via command-line arguments and local file reads (e.g.,
words.json). - Boundary markers: The instructions recommend user-authored clues but do not explicitly define boundary markers for the data passed to the CLI.
- Capability inventory: The skill uses subprocess calls to execute the PuzzleTide CLI tool.
- Sanitization: The CLI tool performs validation to ensure words can interlock in a valid grid format.
Audit Metadata