skill-creator
Warn
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: MEDIUMPERSISTENCECOMMAND_EXECUTIONDATA_EXFILTRATIONEXTERNAL_DOWNLOADS
Full Analysis
- [PERSISTENCE]: The skill implements a 'Supersede Kit' designed to modify the agent's global configuration to handle skill routing collisions. * Evidence:
scripts/setup_supersede_hook.shmodifies the AI agent'ssettings.jsonfile to registerSessionStarthooks. * Evidence:scripts/supersede-routing-hook.shis installed as a persistent shell hook in the agent'shooks/directory. - [DATA_EXFILTRATION]: The skill contains logic to read sensitive local files containing conversation histories for the purpose of knowledge distillation. * Evidence:
scripts/mine_conversation.pyreads project sessions and history from~/.claude/and~/.codex/directories. * Mitigation: The script includes aRedactorclass with patterns to strip API keys, bearer tokens, emails, and user home paths before processing. - [COMMAND_EXECUTION]: Multiple utility scripts execute system commands and external tools as part of the development and packaging workflow. * Evidence:
scripts/run_eval.pyandscripts/improve_description.pyexecuteclaude -pto evaluate and optimize skill triggers. * Evidence:scripts/audit_skill_regression.pyandscripts/reference_net.shexecute variousgitcommands to audit skill changes. - [EXTERNAL_DOWNLOADS]: The skill instructions and templates involve downloading verified security and development tools. * Evidence:
references/prerequisites.mdandscripts/install_<tool>.sh(template) include commands to fetchgitleaksandvercel-labs/skillsfrom their respective official GitHub repositories.
Audit Metadata