writing-skills

Pass

Audited by Gen Agent Trust Hub on Jun 13, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The utility script render-graphs.js uses child_process.execSync to invoke the Graphviz dot command.\n
  • This script extracts DOT-language definitions from SKILL.md and passes them to the local dot utility to generate SVG image files.\n
  • The execution is constrained to the specific dot command with input provided via stdin, mitigating shell injection risks. This is a functional requirement for the skill's visualization features.\n- [SAFE]: No network activity, data exfiltration, or credential harvesting patterns were detected in the provided scripts or documentation.\n- [SAFE]: The documentation references external sources such as agentskills.io and official Anthropic best practices, which are recognized as standard and safe reference points for developers.\n- [SAFE]: While the skill includes a module on 'Persuasion Principles' designed to enforce agent discipline (e.g., through authority and commitment triggers), these are used within the context of quality assurance and do not constitute malicious attempts to bypass safety filters or exfiltrate data.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 13, 2026, 06:23 AM