ascii-diagram-boxflow

Pass

Audited by Gen Agent Trust Hub on Jun 13, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill uses a local script scripts/boxflow.py to perform its core function. The script only imports standard libraries (json, sys, dataclasses, typing) and does not perform any dangerous operations such as network requests, subprocess spawning, or file system writes.
  • [SAFE]: The Python script implements safe parsing logic using json.loads and standard string manipulation to format ASCII boxes and arrows. It does not use eval() or exec() on user input.
  • [SAFE]: The instructions in SKILL.md and the examples in examples/login-flow.md are standard and do not contain any prompt injection or evasion techniques. The "CRITICAL TRIGGER RULE" is a benign usage constraint for the agent.
  • [SAFE]: No obfuscated URLs, hardcoded credentials, or persistence mechanisms were found in the provided files.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 13, 2026, 04:11 AM
Security Audit — agent-trust-hub — ascii-diagram-boxflow