protocol-authoring

Pass

Audited by Gen Agent Trust Hub on Apr 5, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [SAFE]: The skill establishes a methodology for documentation and verification of agent behaviors. The instructional content is aimed at improving agent reliability and safety through rigorous testing.
  • [COMMAND_EXECUTION]: The render-graphs.js script uses the child_process.execSync module to invoke the system's dot (Graphviz) command. This is used specifically to render SVG diagrams from markdown content and does not involve arbitrary command execution or shell injection from external sources.
  • [SAFE]: The file operations performed in the provided Node.js script (reading markdown and writing SVG/DOT files) are limited to the local file system for the purpose of generating documentation artifacts.
  • [SAFE]: No indicators of prompt injection, credential harvesting, or data exfiltration were found. References to 'godmode' and high-pressure instructional language are used within a pedagogical context to teach development discipline.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 5, 2026, 07:45 PM