skill-upper
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download the
skill-upCLI installation script from the author's official GitHub repository atgithub.com/alibaba/skill-up. - [REMOTE_CODE_EXECUTION]: The installation process for the supporting CLI tool involves piping a remote shell script from the author's GitHub repository to
bash. This is the documented method for deploying the tool necessary for the skill's functionality and originates from the skill's official vendor. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process instructions, fixtures, and transcripts from other skills, creating a surface for indirect prompt injection. To mitigate this, the instructions explicitly direct the agent to treat all ingested data as untrusted content and provide specific security guidance for performing credential checks without exposing values. It also includes redaction metadata logic.
- [DYNAMIC_EXECUTION]: The skill's evaluation test suite (
evals/test_regression_scripts.py) utilizes dynamic execution and compilation to verify the effectiveness of its security-related script judges. These operations are limited to the testing environment and are not triggered during the agent's primary interaction with users.
Audit Metadata