skills-management
Pass
Audited by Gen Agent Trust Hub on Nov 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
subprocessmodule across several scripts, includingscripts/optimize_skill.py,scripts/llm_cli.py, andscripts/trigger_test.py, to invoke local LLM CLI tools, manage version control via git, and list plugins. These operations are core to its management functionality. - [EXTERNAL_DOWNLOADS]: As described in
SKILL.md, the skill searches for and installs new capabilities from theskills.shregistry and arbitrary GitHub repositories using thenpx skills addcommand. - [DYNAMIC_EXECUTION]: The optimization workflow in
scripts/optimize_skill.pyimplements a feedback loop that modifies the instruction text inSKILL.mdfiles. It applies edits generated by LLMs to improve agent performance on specific task sets based on performance metrics. - [INDIRECT_PROMPT_INJECTION]: The skill possesses an indirect injection surface as it ingests and analyzes external data such as task prompts, skill documentation, and agent trajectories from third-party sources during optimization and review. It mitigates this by using structural delimiters when constructing prompts for evaluation.
Audit Metadata