claude-skill
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill facilitates the generation of shell commands intended for the Claude Code CLI. These commands can include file modifications, bash execution, and repository analysis. The instructions guide the user toward restrictive flags like
--toolsand--allowedToolsto limit the scope of execution.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes natural language tasks to be delegated to an external agent (Claude Code).\n - Ingestion points: User-provided strings passed to the
claude -pflag inSKILL.mdandreferences/examples.md.\n - Boundary markers: The instructions recommend using
--toolsto define hard boundaries and specific permission modes to reduce accidental obedience to embedded instructions.\n - Capability inventory: The delegated agent (Claude Code) has broad capabilities including
Bash,Read,Edit, andWriteas noted in theSafe Edit Runexample inSKILL.md.\n - Sanitization: The skill relies on the internal safety guardrails of the Claude Code CLI and explicitly advises the user to choose the 'least-permissive suitable permissions' to mitigate risks.\n- [SAFE]: The installation guidance references
@anthropic-ai/claude-codevia NPM, which is an official package from a trusted organization. The documentation also points toward official setup guides.
Audit Metadata