skill-creator
Pass
Audited by Gen Agent Trust Hub on Jul 17, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill acts as a template generator that takes user-provided research workflows and converts them into reusable AI agent skills. This creates an indirect prompt injection surface where untrusted input could influence the logic of the generated skills.
- Ingestion points: User-provided research workflow descriptions and workflow steps (SKILL.md).
- Boundary markers: Absent; the skill does not specify delimiters or instructions to ignore embedded commands within the input data.
- Capability inventory: Capability to write files to the
skills/directory and execute shell-based validation tools. - Sanitization: No explicit sanitization, escaping, or validation of user-provided content is mentioned in the workflow.
- [COMMAND_EXECUTION]: The skill's workflow instructs the agent to run "skill-path tests" and "command/resource discovery" after editing a skill. This involves executing system commands or discovery scripts within the development environment to validate functionality.
Audit Metadata