dcc-mcp-skills-creator
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The
review_skill_improvementprompt inprompts.yamlis designed to ingest untrusted data from task summaries and execution statistics for the purpose of suggesting skill improvements.\n - Ingestion points:
prompts.yaml(task_summary, stats_json, validation_summary).\n - Boundary markers: The prompt includes explicit instructions to treat all supplied text as untrusted evidence and to not follow embedded instructions.\n
- Capability inventory: The skill has access to
Bashand filesystemWritetools.\n - Sanitization: Relies on instructional guardrails within the prompt.\n- [COMMAND_EXECUTION]:
SKILL.mddocuments ecosystem commands such asdcc-mcp-clifor monitoring health, discovery, and performing updates.\n- [REMOTE_CODE_EXECUTION]: The installation instructions inSKILL.mdreference usingnpxandopenclawto download and install components from the ecosystem's registry.\n- [DYNAMIC_EXECUTION]: Thescripts/validate_skill_dir.pyscript reads and analyzes the Abstract Syntax Tree (AST) of external Python scripts to check for best-practice import violations.
Audit Metadata