skills/ma1orek/replay/writing-skills/Gen Agent Trust Hub

writing-skills

Pass

Audited by Gen Agent Trust Hub on Sep 26, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The utility script render-graphs.js uses child_process.execSync to run the system command dot (Graphviz) for rendering diagrams. It operates on local files within the skill directory.
  • [PROMPT_INJECTION]: Test scenarios in testing-skills-with-subagents.md use strong instructional framing like "IMPORTANT: This is a real scenario" to evaluate agent adherence to procedural rules. In the context of the skill's TDD methodology, these are benign testing instruments.
  • [DYNAMIC_EXECUTION]: The skill uses a script to dynamically convert Graphviz definitions in SKILL.md into SVG assets, facilitating visualization without malicious runtime code generation.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 26, 2026, 11:46 AM