generate-skill

Pass

Audited by Gen Agent Trust Hub on Jun 15, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill functions as a generator for documentation and boilerplate code following established design patterns like Tool Wrapper and Pipeline. It does not perform unauthorized network operations, data exfiltration, or privilege escalation.
  • [EXTERNAL_DOWNLOADS]: The skill includes templates (such as pep723.py) that reference common Python libraries like 'requests' and links to official documentation at agentskills.io. These references are standard for the tool's purpose and do not pose a security risk.
  • [PROMPT_INJECTION]: The skill processes user-supplied context to generate skill definitions, creating a potential surface for indirect prompt injection if malicious input is provided. However, this is a property of its role as a generator and is mitigated by the fact that it does not execute the generated content autonomously in a high-privilege context.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 15, 2026, 01:35 AM
Security Audit — agent-trust-hub — generate-skill