illustrate-design
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires installing
@coldtea/pr-lens-schemaand@coldtea/pr-lens-rendereras direct dependencies. These are required components for the diagram rendering functionality. - [COMMAND_EXECUTION]: The skill executes
nodefor rendering and suggests usingrsvg-convertfor image conversion. These commands are standard for the intended design illustration workflow. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the user's workspace (requirements, ADRs, source code) to produce diagrams. This presents an attack surface for data-driven influence on the agent's output.
- Ingestion points: Reads files such as
GLOSSARY.md,ADR.md, and application source code via instructions in SKILL.md. - Boundary markers: None explicitly defined in instructions, but it relies on structured schema-based validation for the rendering data.
- Capability inventory: File system writes via
writeFile, directory creation viamkdir, and command execution via Node.js and shell. - Sanitization: Employs
safeParseGraphDocfrom@coldtea/pr-lens-schemafor input validation and includes automated tests intest_render.mjsthat explicitly check for the absence of script tags in generated SVGs.
Audit Metadata