puzzletide-word-search
Pass
Audited by Gen Agent Trust Hub on Aug 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
ptideandpuzzletidecommand-line tools to generate puzzle grids and printable formats. - Evidence: Commands such as
ptide wordsearch generateandpuzzletide --versionare used within the skill instructions inSKILL.md. - [EXTERNAL_DOWNLOADS]: The skill installs the
puzzletidepackage from the public npm registry. - Evidence: The skill defines a Node.js package dependency in the metadata and provides instructions for manual installation via
npm install -g puzzletideinSKILL.mdif the tool is missing. - Note: The package is owned and maintained by the skill author, Caravaca Labs.
- [INDIRECT_PROMPT_INJECTION]: The skill defines a surface where user-provided word lists are passed as arguments to a CLI tool.
- Ingestion points: The
--wordsargument inSKILL.mdaccepts strings provided by the user. - Boundary markers: The input is wrapped in double quotes in the command examples.
- Capability inventory: The skill can execute the
ptidebinary via the terminal toolset. - Sanitization: Not explicitly handled in the skill instructions; input handling is deferred to the
puzzletideCLI tool.
Audit Metadata