writing-skills
Pass
Audited by Gen Agent Trust Hub on Apr 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The provided
render-graphs.jsutility executes the system commanddot(part of the Graphviz suite) using Node.js'sexecSync. This is used to transform markdown-embeddeddotblocks into SVG diagrams for visualization. The command execution is performed on data extracted from local files and uses standard input (stdin) for the diagram content, which is a secure implementation pattern. - [PROMPT_INJECTION]: The documentation files
persuasion-principles.mdandtesting-skills-with-subagents.mdinclude meta-instructions on how to design prompts that override an agent's tendency to rationalize away from disciplinary protocols (like TDD). While these techniques involve using authoritative and imperative language typically associated with behavioral influence, they are presented as educational guidelines for building reliable, self-enforcing skill documentation and do not target the platform's safety guardrails or user interests. - [EXTERNAL_DOWNLOADS]: The
anthropic-best-practices.mdfile contains references to well-known Python packages such aspdfplumber,pypdf,pdf2image, andpytesseractas examples of tool usage. These are standard libraries from established repositories and are documented neutrally for educational purposes.
Audit Metadata