writing-skills

Pass

Audited by Gen Agent Trust Hub on Aug 10, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The utility script render-graphs.js executes the system dot command (Graphviz) to render diagrams extracted from the skill's documentation. The script implements security best practices by passing untrusted content via stdin and using a path sanitization library to prevent directory traversal.
  • [EXTERNAL_DOWNLOADS]: The included Node.js utility script render-graphs.js depends on the sanitize-filename package. While this is an external dependency, it is used for security validation of file paths during the diagram rendering process.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 10, 2026, 03:45 AM
Security Audit — agent-trust-hub — writing-skills