puzzletide-word-search

Pass

Audited by Gen Agent Trust Hub on Aug 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes the ptide and puzzletide command-line tools to generate puzzle grids and printable formats.
  • Evidence: Commands such as ptide wordsearch generate and puzzletide --version are used within the skill instructions in SKILL.md.
  • [EXTERNAL_DOWNLOADS]: The skill installs the puzzletide package from the public npm registry.
  • Evidence: The skill defines a Node.js package dependency in the metadata and provides instructions for manual installation via npm install -g puzzletide in SKILL.md if the tool is missing.
  • Note: The package is owned and maintained by the skill author, Caravaca Labs.
  • [INDIRECT_PROMPT_INJECTION]: The skill defines a surface where user-provided word lists are passed as arguments to a CLI tool.
  • Ingestion points: The --words argument in SKILL.md accepts strings provided by the user.
  • Boundary markers: The input is wrapped in double quotes in the command examples.
  • Capability inventory: The skill can execute the ptide binary via the terminal toolset.
  • Sanitization: Not explicitly handled in the skill instructions; input handling is deferred to the puzzletide CLI tool.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 16, 2026, 11:00 PM