ascii-diagram-creator
Warn
Audited by Gen Agent Trust Hub on Apr 4, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONPROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes several shell commands such as
grep,glob,git log,ls, andcatto automate the discovery of project architecture and directory structures. It specifically instructs the agent to execute these commands across the codebase to populate diagram templates. - [PROMPT_INJECTION]: The skill defines a set of proactive triggers and directives intended to be added to the agent's configuration files (e.g.,
CLAUDE.md). By appending these instructions, the skill modifies the agent's future behavior and interaction style, creating a persistence mechanism for its own operational logic. - [DATA_EXFILTRATION]: The skill performs automated codebase scanning using
glob,grep, andreadcommands on directories likesrc/,app/, and files likepackage.json. While intended for architecture discovery, this allows the agent to access and process the contents of the project environment. - [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection by reading and processing data from untrusted local project files during its auto-discovery phase. Specifically, it reads
package.jsonand performs recursive searches through thesrc/directory without defined boundary markers or sanitization of the ingested content.
Audit Metadata