make-diagram
Pass
Audited by Gen Agent Trust Hub on Nov 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted content from SVG and HTML files which could contain malicious instructions designed to influence the agent.
- Ingestion points: The
scripts/check_diagram.pyscript reads diagram content using a headless browser via Playwright. - Boundary markers: Text extracted from diagrams is printed directly to the console in error reports and wording correction findings without delimiters or protective instructions.
- Capability inventory: The skill can write files (PNG screenshots) and provides detailed textual feedback that becomes part of the agent's context.
- Sanitization: No sanitization or escaping is applied to text content extracted from the diagrams before it is printed.
- [COMMAND_EXECUTION]: The
scripts/test_check_diagram.pyscript usessubprocess.runto execute the diagram checker during local automated testing. This is standard behavior for a validation suite. - [DYNAMIC_EXECUTION]: The
scripts/check_diagram.pyscript uses Playwright'sevaluatemethod to execute a local JavaScript file (diagram_geometry.js) within a browser context for geometric analysis. This execution uses a static, resolved path to the local source file. - [EXTERNAL_DOWNLOADS]: The skill depends on the
playwrightlibrary, which is a well-known service for browser automation. The dependency is declared in a PEP 723 script block within the checker script.
Audit Metadata