skill-builder
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill acts as an instructional framework for developers. It explicitly advocates for secure practices, such as using environment variables for sensitive credentials and implementing user confirmation steps before performing actions.
- [DYNAMIC_CONTEXT_INJECTION]: The
reference.mdfile documents the!commandsyntax for preprocessing context. The examples provided (e.g.,git status,gh pr diff) are standard development tools used to illustrate legitimate functionality without evidence of malicious use. - [INDIRECT_PROMPT_INJECTION]: The skill uses an interactive "Discovery Interview" to collect requirements from the user. While this process ingests external input to generate instructions, it includes built-in safeguards, such as a confirmation round where the agent summarizes the proposed workflow for human review before any files are created.
- [EXTERNAL_DOWNLOADS]: The
reference.mdfile contains links to official documentation for Claude Code hosted on the trusted domaincode.claude.com.
Audit Metadata