ascii-diagram-boxflow

Pass

Audited by Gen Agent Trust Hub on Jun 23, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No security issues were detected in this skill. The skill is designed to process user-provided node and edge data into ASCII diagrams.
  • [COMMAND_EXECUTION]: The skill utilizes a local Python script (scripts/boxflow.py) for diagram generation. Analysis of the script confirms it uses standard libraries (json, sys, dataclasses) to process input from stdin and print results to stdout. No dangerous subprocess calls or shell execution patterns were identified.
  • [DATA_EXFILTRATION]: The skill contains no network-enabled commands or operations. There are no calls to external APIs, and no usage of tools like curl, wget, or Python's requests library.
  • [CREDENTIALS_UNSAFE]: No hardcoded secrets, API keys, or sensitive file paths (e.g., .env, .ssh) were found in any of the skill's files.
  • [PROMPT_INJECTION]: The instructional content in SKILL.md is focused on defining triggers and usage boundaries without attempting to override agent safety protocols or system instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 23, 2026, 04:08 PM
Security Audit — agent-trust-hub — ascii-diagram-boxflow