skills/jeremylongshore/claude-code-plugins-plus-skills/lucidchart-core-workflow-b/Gen Agent Trust Hub
lucidchart-core-workflow-b
Pass
Audited by Gen Agent Trust Hub on Aug 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a documentation-based guide for interacting with the Lucidchart API. All code snippets demonstrate legitimate use of a client library for sharing documents, managing permissions, and tracking revisions. All external links point to the official
lucid.codeveloper domain. - [INDIRECT_PROMPT_INJECTION]: The skill provides instructions for reading open comments and revision summaries from Lucidchart documents.
- Ingestion points:
client.documents.comments.list()andclient.documents.revisions.list()inSKILL.md. - Boundary markers: None present.
- Capability inventory: The skill is allowed to use
Bash(npm:*),Read,Write,Edit, andGreptools. - Sanitization: No explicit sanitization of comment text or revision summaries is shown before logging to the console. While this presents a surface for indirect prompt injection if an attacker places instructions in a comment, the impact is limited by the lack of automated high-privilege execution on the retrieved data.
Audit Metadata