skill-creator
Pass
Audited by Gen Agent Trust Hub on Apr 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The scripts
scripts/run_eval.pyandscripts/improve_description.pyexecute theclaudeCLI tool using Python'ssubprocessmodule to perform skill evaluations and description optimizations. - [COMMAND_EXECUTION]: The
eval-viewer/generate_review.pyscript executes thelsofcommand viasubprocess.runto manage local network ports for its review server. - [INDIRECT_PROMPT_INJECTION]: * Ingestion points: Untrusted user-provided test prompts are read from the
evals/evals.jsonfile. * Boundary markers: Prompts are passed as arguments to theclaudeCLI inscripts/run_eval.pywithout markers to distinguish them from system instructions. * Capability inventory: The skill possesses the ability to execute shell commands, write files to the local system, and host a local HTTP server. * Sanitization: The skill does not perform sanitization or validation of test prompts before they are executed by the agent session.
Audit Metadata