The Agent Skills Directory

[SAFE]: The skill is a legitimate utility for technical diagramming, providing structured guidelines and automation scripts for rendering D2 source files and validating SVG legibility.
[COMMAND_EXECUTION]: The script scripts/render_d2.sh executes the d2 diagramming tool and a local Python validation script. These executions are performed using local binaries and do not involve shell injection vulnerabilities or execution of untrusted remote content.
[DYNAMIC_EXECUTION]: The unit test scripts/test_validate_svg.py uses subprocess.run to execute the local validate_svg.py script for testing. The command is constructed as a list of arguments without using shell=True, which is a safe implementation for its intended testing purpose.
[DATA_EXPOSURE]: No hardcoded credentials, sensitive file paths, or unauthorized network operations were found. The skill operates on local diagram source files.
[PROMPT_INJECTION]: The instructional content in SKILL.md and the reference files focus strictly on editorial principles and diagramming syntax. No patterns attempting to bypass safety filters or override agent instructions were detected.

technical-diagram