skill-awesome
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is primarily educational, providing specifications and best practices for skill development. All external links point to reputable documentation and security research sites.
- [COMMAND_EXECUTION]: The skill includes a Python script (
scripts/build_awesome.py) designed to automate the creation of an awesome-list style index. The script relies exclusively on Python standard libraries and performs local file system operations (read/write) based on user-provided arguments. - [INDIRECT_PROMPT_INJECTION]: The provided indexing script processes data from external
SKILL.mdfiles. While this represents a data ingestion surface, the script only extracts specific metadata fields for formatting into a static markdown document, with no mechanisms for execution or influence over agent control flow.
Audit Metadata