yy-check-skills-consistency
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes git commands such as
git diffandgit statusto identify changes in the directory structure. It also modifies thescripts/install-skills.tsfile, which is a functional script executed during the installation process, to maintain an array of skill names. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests untrusted data from the local file system to modify project files. \n
- Ingestion points: Reads directory names from the
skills/folder and descriptions from the frontmatter ofSKILL.mdfiles.\n - Boundary markers: None; the skill directly interpolates external strings into the README and script files.\n
- Capability inventory: File system read/write access and the ability to modify executable TypeScript files.\n
- Sanitization: There is no mention of sanitization or escaping for the data written into the
oldSkillNamesToDeletearray inscripts/install-skills.ts.
Audit Metadata