svg-flowchart
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute local Python scripts (
render_flowchart.py,svg2pdf.py,validate_flowchart_style.py) and a Windows batch script (batch_svg2pdf_flows.bat) to process flowchart data and convert files. These scripts use standard libraries for JSON processing and file I/O within the workspace. - [INDIRECT_PROMPT_INJECTION]: The skill ingests user-provided natural language or structured text to define flowchart nodes and connections. While this is an ingestion surface, the data is processed by a specific rendering script that generates static SVG code, minimizing the risk of instruction override.
- Ingestion points: User descriptions, step lists, and JSON specs provided to the agent as described in
SKILL.md. - Boundary markers: The instructions define structured templates for input (e.g., Node/Link lists), which helps the agent distinguish data from instructions.
- Capability inventory: The skill uses
pathlibfor file writing andsubprocess-style calls to its own Python scripts and theinkscapeCLI tool. - Sanitization: The
render_flowchart.pyscript includes anencode_entitiesfunction to sanitize non-ASCII characters into HTML numeric entities before embedding them in SVG output, which prevents character encoding issues and basic injection in the resulting SVG.
Audit Metadata