puzzletide-crossword

Pass

Audited by Gen Agent Trust Hub on Jul 17, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes terminal commands ptide and puzzletide to generate crossword grids, list words, and create PDFs. These operations are performed within the local environment provided by the terminal toolset.
  • [EXTERNAL_DOWNLOADS]: The skill references the puzzletide package available via the NPM registry. This is a vendor-owned utility created by Caravaca Labs for the purpose of crossword generation.
  • [DATA_EXPOSURE_AND_EXFILTRATION]: The skill processes word lists and clues provided by the user locally. The instructions state that no network access, API keys, or external accounts are required, ensuring data remains on the local system.
  • [PROMPT_INJECTION]: The skill includes a surface for processing untrusted data through the --words and --file arguments in SKILL.md. While no specific boundary markers or sanitization methods are mentioned, this ingestion is integral to the primary function of the puzzle generation tool.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 17, 2026, 02:02 AM
Security Audit — agent-trust-hub — puzzletide-crossword