skill-creator
Pass
Audited by Gen Agent Trust Hub on May 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
subprocessto interact with system tools and the platform's CLI. scripts/run_eval.py: Usessubprocess.Popento executeclaude -pfor running evaluation queries.eval-viewer/generate_review.py: Usessubprocess.runto calllsoffor clearing local ports during server initialization.- [EXTERNAL_DOWNLOADS]: Fetches client-side libraries from well-known sources to support the evaluation viewer UI.
eval-viewer/viewer.html: Downloads the SheetJS library fromcdn.sheetjs.comto render spreadsheet outputs.- [DATA_EXFILTRATION]: Operates a local server to facilitate user review of test results.
eval-viewer/generate_review.py: Starts an HTTP server on127.0.0.1to serve the review interface. User feedback is saved to a localfeedback.jsonfile.- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it processes content from external skills during its evaluation workflow.
- Ingestion points: Reads transcripts and output files from the
workspacedirectory ineval-viewer/generate_review.pyandagents/grader.md. - Boundary markers: Uses role instructions for grader and analyzer subagents, but lacks explicit delimiters for processed transcript content.
- Capability inventory: Includes file system access and the ability to execute platform commands via the
claudeCLI. - Sanitization: The viewer UI uses standard HTML escaping for displaying text content.
Audit Metadata