writing-skills

Pass

Audited by Gen Agent Trust Hub on Oct 24, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The render-graphs.js utility script executes the system command dot (part of the Graphviz suite) to render markdown-embedded diagrams into SVG files. This execution is performed locally on the user's filesystem using the execFileSync method, which is restricted to the specific Graphviz binary and does not involve shell interpolation of skill content. This is a functional requirement for the skill's visualization features.
  • [EXTERNAL_DOWNLOADS]: The documentation references standard software libraries (e.g., pdfplumber, pypdf) and platform-standard tools (e.g., Graphviz) as prerequisites for certain workflows. These are well-known, legitimate resources used for document processing and diagram rendering.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 24, 2026, 04:45 PM