writing-skills

the skills.sh security audit flagged this skill (status=warn, risk=medium) — Gen Agent Trust Hub: [COMMAND_EXECUTION]: The script render-graphs.js uses execFileSync to execute the external dot command (from Graphviz). It extracts DOT language blocks from SKILL.md and passes them directly to the system subprocess for rendering, which involves piping content to an external binary.\n- [DYNAMIC_EXECUTION]: The utility render-graphs.js dynamically extracts code blocks from markdown documentation and executes them via an external process at runtime. This creates a dependency on external tools being available in the environment to process documentation-embedded code.\n- [PROMPT_INJECTION]: The d…