personal-tool-builder
Pass
Audited by Gen Agent Trust Hub on Mar 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns detected. The skill provides instructional content for developers to build their own tools.
- [COMMAND_EXECUTION]: The skill includes code templates for CLI tools using standard libraries like
commander(Node.js) andclick(Python). These examples demonstrate secure argument parsing. - [DATA_EXFILTRATION]: The code snippets for local storage use standard paths within the user's home directory (e.g.,
~/.mytool) to store application data and configuration, which is a standard and safe practice for CLI tools. - [EXTERNAL_DOWNLOADS]: The skill references standard, well-known libraries in its
package.jsonexample (e.g.,commander,chalk,better-sqlite3). These are industry-standard packages for the described tasks. - [INDIRECT_PROMPT_INJECTION]: The provided SQLite example correctly uses prepared statements (
db.prepare('SELECT * FROM items').all()), demonstrating best practices for preventing injection attacks.
Audit Metadata