data-context
Pass
Audited by Gen Agent Trust Hub on Apr 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill is designed to programmatically generate directory structures and write multiple markdown files (SKILL.md, entities.md, etc.) to the local .claude/skills/ path.
- [PROMPT_INJECTION]: Employs highly directive instructions and 'Iron Laws' (e.g., 'not negotiable', 'YOU MUST') to enforce a rigid state-machine interview process.
- [PROMPT_INJECTION]: Includes an indirect prompt injection surface as it captures unvalidated user interview data and persists it into executable skill instructions. 1. Ingestion points: User interview inputs collected via the chat interface. 2. Boundary markers: No explicit delimiters or safety warnings are included in the generated skill templates. 3. Capability inventory: Writing new skill files to the local project root. 4. Sanitization: No evidence of input validation or escaping before data is written to the persistent skill files.
Audit Metadata