dym-diagram-design-install-and-verify
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to clone a repository from an external GitHub account (github.com/cathrynlavery/diagram-design) and install the "playwright" package via pip.
- [REMOTE_CODE_EXECUTION]: The installation guide includes steps to run Python scripts contained within the downloaded external repository (e.g., drawio_extract.py).
- [COMMAND_EXECUTION]: Provides various shell commands for symlinking directories to agent configuration paths and verifying the environment setup.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data via diagram extraction scripts (drawio_extract.py) in the SKILL.md documentation. No boundary markers or "ignore" instructions are specified to separate diagram content from agent instructions. The skill requires capabilities such as shell command execution and file reading. No sanitization or validation of the extracted diagram content is mentioned.
Audit Metadata