writing-skills
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The
render-graphs.jsutility script executes the system commanddot(part of the Graphviz suite) to render markdown-embedded diagrams into SVG files. This execution is performed locally on the user's filesystem using theexecFileSyncmethod, which is restricted to the specific Graphviz binary and does not involve shell interpolation of skill content. This is a functional requirement for the skill's visualization features. - [EXTERNAL_DOWNLOADS]: The documentation references standard software libraries (e.g.,
pdfplumber,pypdf) and platform-standard tools (e.g., Graphviz) as prerequisites for certain workflows. These are well-known, legitimate resources used for document processing and diagram rendering.
Audit Metadata