writing-skills
Warn
Audited by Gen Agent Trust Hub on Apr 14, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The utility script
render-graphs.jsexecutes the system commanddot(from the Graphviz suite) and thewhichcommand using Node.jschild_process.execSync. It processes content extracted fromSKILL.mdand pipes it into thedotbinary to generate SVG diagrams. - [PROMPT_INJECTION]: Multiple documentation files, including
testing-skills-with-subagents.mdandexamples/CLAUDE_MD_TESTING.md, employ and teach the use of 'pressure scenarios' designed to override an agent's standard decision-making processes. These patterns use injection-like triggers such as 'IMPORTANT: This is a real scenario', 'You must choose and act', and 'No exceptions' to simulate high-stakes environments and discourage rationalization or safety-based refusals. - [EXTERNAL_DOWNLOADS]: The skill's documentation (
anthropic-best-practices.md) explicitly recommends the installation and use of external libraries from public registries, includingpdfplumber,pypdf,pdf2image, anddocx-jsto extend the agent's capabilities.
Audit Metadata