writing-skills
Pass
Audited by Gen Agent Trust Hub on Nov 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The
render-graphs.jsutility script utilizesexecSyncto invoke the Graphvizdotbinary. - Evidence: Found in
render-graphs.js, which usesexecSync('dot -Tsvg', ...)andexecSync('which dot', ...)to process DOT source code. - Context: This script is intended to generate SVG diagrams locally from markdown content for documentation and visualization purposes.
- [PROMPT_INJECTION]: The skill documentation teaches and employs prompt engineering techniques that use override markers and deceptive framing to enforce behavior.
- Evidence: The file
testing-skills-with-subagents.mdutilizes "IMPORTANT: This is a real scenario" to force choices in pressure tests, andpersuasion-principles.mdinstructs the use of authoritative markers such as "YOU MUST", "Never", and "No exceptions". - Pattern: These techniques are identical to prompt injection patterns designed to bypass an agent's standard autonomous reasoning and safety guidelines, though they are applied here for instructional discipline and meta-testing.
Audit Metadata