writing-skills
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The utility script
render-graphs.jsuseschild_process.execSyncto invoke the Graphvizdotcommand.\n - This script extracts DOT-language definitions from
SKILL.mdand passes them to the localdotutility to generate SVG image files.\n - The execution is constrained to the specific
dotcommand with input provided viastdin, mitigating shell injection risks. This is a functional requirement for the skill's visualization features.\n- [SAFE]: No network activity, data exfiltration, or credential harvesting patterns were detected in the provided scripts or documentation.\n- [SAFE]: The documentation references external sources such as agentskills.io and official Anthropic best practices, which are recognized as standard and safe reference points for developers.\n- [SAFE]: While the skill includes a module on 'Persuasion Principles' designed to enforce agent discipline (e.g., through authority and commitment triggers), these are used within the context of quality assurance and do not constitute malicious attempts to bypass safety filters or exfiltrate data.
Audit Metadata