skill-development
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The
skill-report.jsonfile contains asecurity_auditsection with self-referential safety claims, providing a pre-computed "safe" verdict and technical summary asserting "zero attack surface." - Ingestion points:
skill-report.jsonmetadata file. - Boundary markers: None.
- Capability inventory: The skill is a documentation-only resource; no executable scripts, network tools, or file system writing capabilities are included in the provided files.
- Sanitization: Not applicable as the skill does not process external data or execute commands.
- [COMMAND_EXECUTION]: The documentation in
SKILL.mdandreferences/skill-creator-original.mdincludes shell command examples for directory creation (mkdir), skill initialization (init_skill.py), and plugin testing (cc). These are presented as instructional examples for manual developer use and are not executed by the agent automatically.
Audit Metadata