writing-skills

Pass

Audited by Gen Agent Trust Hub on Sep 19, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The utility script render-graphs.js executes the system's dot command-line tool.\n
  • Evidence: The script uses execFileSync('dot', ['-Tsvg'], ...) to generate SVG files from Graphviz DOT descriptions found in markdown files.\n- [DYNAMIC_EXECUTION]: The skill uses a utility script to extract and process embedded code blocks at runtime.\n
  • Evidence: render-graphs.js uses regular expressions to dynamically extract the contents of dot code blocks and passes them to an external rendering process.\n- [SAFE]: External references are limited to trusted documentation repositories and asset delivery services.\n
  • Evidence: The skill documentation links to specifications on agentskills.io and incorporates visual aids hosted on mintcdn.com, which is a trusted content delivery network used by Anthropic.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 19, 2026, 12:42 PM