writing-skills
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The utility script
render-graphs.jsexecutes the systemdotcommand (Graphviz) to render diagrams extracted from the skill's documentation. The script implements security best practices by passing untrusted content via stdin and using a path sanitization library to prevent directory traversal. - [EXTERNAL_DOWNLOADS]: The included Node.js utility script
render-graphs.jsdepends on thesanitize-filenamepackage. While this is an external dependency, it is used for security validation of file paths during the diagram rendering process.
Audit Metadata