skill-factory
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEDYNAMIC_CONTEXT_INJECTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is a meta-tool designed to assist in the creation of other skills. It provides structure, documentation, and templates without any malicious intent.
- [DYNAMIC_CONTEXT_INJECTION]: The skill includes documentation and examples for using shell commands (e.g.,
ls,date) within skill files to inject data at load time. These examples are documented within code blocks for instructional purposes and do not execute malicious code or exfiltrate data. - [INDIRECT_PROMPT_INJECTION]: The skill functions as a generator that creates files based on user requirements. While this creates a potential surface for indirect prompt injection via user-supplied content, the skill itself does not process untrusted external data in an unsafe manner and relies on direct user interaction.
Audit Metadata