writing-skills
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The utility script
render-graphs.jsuseschild_process.execFileSyncto run the host system'sdotcommand, enabling the execution of external binary logic to process data extracted from skill files. - [PROMPT_INJECTION]: The skill instructions and the
persuasion-principles.mddocument employ strong imperative language (e.g., 'YOU MUST', 'No exceptions', 'Never') and specific framing techniques (e.g., 'IMPORTANT: This is a real scenario') designed to override default AI behavior and enforce adherence to the TDD process. - [INDIRECT_PROMPT_INJECTION]: The
render-graphs.jsscript provides an ingestion surface by reading and parsingSKILL.mdfiles. It extracts content from Graphviz code blocks and passes it to an external execution tool without rigorous input sanitization, creating a potential vector for processing untrusted data. - [EXTERNAL_DOWNLOADS]: The skill's documentation within
anthropic-best-practices.mdincludes references to external resource acquisition, specifically recommending the installation of thepdfplumberPython package via standard registry tools.
Audit Metadata