Node.js child_process module usage for shell command execution
Cisco AI Defenserender-graphs.js:112 — Pattern detected: execSync(
Use when creating new skills, editing existing skills, or verifying skills work before deployment
This skill includes a SKILL.md descriptor. 8 critical and 2 advisory security observations were identified — review the findings below for details.
Vettd Verdict
The overall verdict combines pass, warning, and failure signals across our checks. Click to see how each check is computed.Skill failed: 1 hard fail in security or structure checks.
Link points to the repository’s default branch (current HEAD). Certification reflects the state of the repo on Jun 30, 2026. Scanned at 896224c4.
/ coming soon
/ coming soon
/ coming soon
/ coming soon
security
render-graphs.js:112 — Pattern detected: execSync(
Detected in render-graphs.js:18 — `const { execSync } = require('child_process');`
render-graphs.js:120 — Pattern detected: fs.readFileSync(
SKILL.md — Only 87% of skill content could be analyzed. 1 of 7 files are opaque to the scanner. Some content could not be verified as safe.
External URL(s) detected in SKILL.md — referenced content can change after audit
Scanned text content for instruction override, jailbreak framing, credential solicitation, and embedded injection markers
No repository field found in SKILL.md frontmatter. Skills without a verifiable source repository cannot be externally audited.
SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.
best practices
Explicit checklists help agents track progress in multi-step workflows
Found code blocks, input/output samples, or an examples section — concrete samples help agents pattern-match effectively
Documents environment-specific facts and common pitfalls
685 lines — consider moving detailed reference material to references/
Structured procedures improve reliability for complex tasks
Instructions for the agent to validate its own work before proceeding
description
Good: description explains when to activate the skill
97/1024 characters used
evals
Add an evals/ directory with test prompts and expected outputs to measure skill quality
structure
Consider bundling reusable scripts for validation and automation
Required skill definition file found
Name "writing-skills" follows spec (lowercase, hyphens, ≤64 chars)