skill_creator
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands to facilitate its workflow.
- It executes a local binary at
/opt/hatch/skills/skill-creator/bin/scaffold-connector-skillto generate skill templates. - It uses
python3 -m py_compileto validate the syntax of generated Python scripts in thebin/directory. - [INDIRECT_PROMPT_INJECTION]: The skill acts as a generator for new agent capabilities, creating an attack surface where user input influences the creation of instructions and scripts.
- Ingestion points: User-provided descriptions and requirements for the new skill (SKILL.md).
- Boundary markers: None explicitly defined to isolate user-supplied instructions during the generation process.
- Capability inventory: Writing files to
~/workspace/skills/, executing a scaffolding script, and performing Python compilation (SKILL.md). - Sanitization: No explicit sanitization or content validation of the generated output is defined in the instructions.
Audit Metadata