svg-book-illustrator
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
subprocessmodule to execute external system utilities for rendering and verifying diagrams. Specifically,scripts/render_svg.py,scripts/verify_render_font_equivalence.py, and the unit tests inscripts/tests/invokersvg-convertandmagick(ImageMagick) to process SVG files and compare image output. - [DYNAMIC_EXECUTION]: The verification script
scripts/verify_render_font_equivalence.pyand the generator tests inscripts/tests/test_svg_producer_contract.pydynamically execute other Python scripts within the skill usingsys.executableto perform regression testing and property validation. - [INDIRECT_PROMPT_INJECTION]: The skill processes external, user-provided Markdown documents, which introduces a surface for indirect prompt injection attacks.
- Ingestion points:
extract_svgs.pyandscan_consistency.pyread and parse Markdown files specified by the user to extract or validate inline SVG blocks. - Boundary markers: The scripts do not utilize specific delimiters or "ignore instructions" warnings when ingesting the contents of these documents.
- Capability inventory: The skill possesses the capability to write files to the local file system and execute shell commands via subprocess calls.
- Sanitization: Content extracted from Markdown files undergoes minimal sanitization before being processed by the SVG extraction logic.
- [EXTERNAL_DOWNLOADS]: The
scripts/svg2png.jsutility relies on thepuppeteerNode.js package for browser-based rendering. The skill's documentation inSKILL.mdidentifies this as a required external dependency and provides instructions for manual installation via the standardnpmregistry.
Audit Metadata