agent-writing
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill documentation suggests running a local Python script
scripts/check_prose.pyto validate Markdown files. Analysis of the script shows it is a benign utility that uses the Python standard library (re, json, pathlib) to perform regex-based text analysis and linting. It does not use any dangerous functions likeeval(),exec(), orsubprocessto execute arbitrary commands. - [EXTERNAL_DOWNLOADS]: The skill contains references to official Google developer documentation and a public repository from Cursor (Anysphere) as sources for its writing guidelines. These are trusted and well-known technology sources and do not represent a security risk.
- [DATA_EXPOSURE]: The prose-checking script reads local Markdown files and a
skills-lock.jsonfile to determine which files to lint. This is standard behavior for a local development tool and does not involve unauthorized access to sensitive files or credentials. - [NO_CODE]: Besides the included Python script and its associated test file, the skill consists entirely of instructional Markdown content and agent configuration.
Audit Metadata