writing-skills

Pass

Audited by Gen Agent Trust Hub on Jun 12, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The utility script render-graphs.js uses child_process.execSync to execute the system dot (Graphviz) command. It pipes markdown code blocks into the command to generate SVG diagrams. It also uses which dot to check for the presence of the required system dependency.
  • [EXTERNAL_DOWNLOADS]: The documentation files (SKILL.md, anthropic-best-practices.md, testing-skills-with-subagents.md) reference various third-party libraries and tools such as pdfplumber, pypdf, docx-js, and graphviz. These are provided as examples and best practices for skill development rather than being direct runtime dependencies of this skill itself.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 12, 2026, 10:41 PM
Security Audit — agent-trust-hub — writing-skills