writing-skills

Pass

Audited by Gen Agent Trust Hub on Mar 29, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The utility script render-graphs.js uses the Node.js child_process.execSync module to invoke the system command dot. This is a legitimate function designed to render Graphviz diagrams from Markdown blocks within the skill's own documentation for visualization purposes.
  • [EXTERNAL_DOWNLOADS]: The documentation references external development tools and libraries, such as claude-skills-cli, pdfplumber, and pypdf, within instructional examples. These are standard tools in the development ecosystem and are not executed automatically by the skill.
  • [PROMPT_INJECTION]: The skill contains guidance on using authoritative language (e.g., "YOU MUST", "No exceptions") to ensure agents adhere to strict technical disciplines like TDD. These patterns are documented as pedagogical techniques for high-quality instruction writing and do not attempt to bypass agent safety filters or override core system guidelines.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 29, 2026, 01:06 PM