dbk-skill-dev
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to dynamically fetch its authoritative instructions and formatting standards from a remote URL (
https://agentskills.io/llms.txt) at runtime. - Ingestion points: Fetches
llms.txtand subsequent Markdown pages from theagentskills.iodomain into the agent context. - Boundary markers: Absent. The skill instructions state that the fetched remote content is the 'only fact standard' and takes priority over local instructions.
- Capability inventory: The skill can execute shell commands via
uv,pi, andskills-ref, and can read/write files in the local workspace. - Sanitization: No validation or sanitization is performed on the remote instructional content before it is adopted as the agent's operating standard.
- [EXTERNAL_DOWNLOADS]: The skill fetches instructional Markdown files from
agentskills.io. It also utilizesuvxto download and run theskills-refpackage for validation, which involves fetching code from a remote registry. - [COMMAND_EXECUTION]: The skill executes various CLI tools to perform its development and evaluation tasks.
- The
scripts/run_trigger_eval.pyscript usessubprocess.runto execute thepiCLI tool with user-supplied queries. - The
SKILL.mdfile instructs the agent to useuvx skills-reffor validating the formatting of new skills. - It uses
uv runto execute the local evaluation script with specific environment requirements.
Audit Metadata