protocol-authoring
Pass
Audited by Gen Agent Trust Hub on Apr 5, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill establishes a methodology for documentation and verification of agent behaviors. The instructional content is aimed at improving agent reliability and safety through rigorous testing.
- [COMMAND_EXECUTION]: The
render-graphs.jsscript uses thechild_process.execSyncmodule to invoke the system'sdot(Graphviz) command. This is used specifically to render SVG diagrams from markdown content and does not involve arbitrary command execution or shell injection from external sources. - [SAFE]: The file operations performed in the provided Node.js script (reading markdown and writing SVG/DOT files) are limited to the local file system for the purpose of generating documentation artifacts.
- [SAFE]: No indicators of prompt injection, credential harvesting, or data exfiltration were found. References to 'godmode' and high-pressure instructional language are used within a pedagogical context to teach development discipline.
Audit Metadata