skill-creator
Pass
Audited by Gen Agent Trust Hub on Aug 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill requires the execution of multiple Python and shell scripts to automate the development lifecycle of other skills.
- It instructs the execution of
python -m scripts.aggregate_benchmarkto compile evaluation metrics. - It uses
python eval-viewer/generate_review.pyto launch a review server or generate static HTML reports for human evaluation. - It invokes
python -m scripts.run_loopto perform description optimization, which involves calling the Claude CLI. - It uses
python -m scripts.package_skillto bundle the completed skill for distribution. - It mentions the use of shell scripts like
scripts/check-prompts.shandscripts/run-behavioral-evals.shfor triggering evaluations. - [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface (Category 8) because it processes untrusted user data to generate executable instructions for subagents.
- Ingestion points: User-provided test prompts, conversation history, and user feedback stored in
feedback.json. - Boundary markers: No specific boundary markers or delimiters are defined to separate user input from agent instructions.
- Capability inventory: The skill has the ability to write files to the local filesystem (
safety: writes-files), execute Python scripts, and spawn subagents to run tasks. - Sanitization: There is no evidence of input validation, escaping, or sanitization for the data processed by the skill.
- [EXTERNAL_DOWNLOADS]: The skill documentation refers to the
claude-memplugin hosted on GitHub atgithub.com/thedotmack/claude-mem. This is identified as a dependency for the evaluation and benchmarking functionalities.
Audit Metadata