snipgrapher
Pass
Audited by Gen Agent Trust Hub on Mar 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npxto fetch and execute thesnipgrapherpackage from the npm registry, which is a standard well-known service for Node.js tools.\n- [COMMAND_EXECUTION]: The skill relies on shell commands likesnipgrapher renderandsnipgrapher initto perform its primary rendering and configuration tasks.\n- [PROMPT_INJECTION]: The skill processes user-supplied source code files, creating a potential surface for indirect prompt injection.\n - Ingestion points: Source files (e.g.,
file.ts) provided as input to therendercommand inSKILL.mdandrules/rendering-workflows.md.\n - Boundary markers: There are no explicit instructions or delimiters used to separate the content of the source files from the agent's operating instructions.\n
- Capability inventory: The agent can execute CLI commands and interact with the file system while performing rendering tasks.\n
- Sanitization: The instructions do not specify any validation or sanitization of the input file names or their content before processing.
Audit Metadata