skill-improver
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to read, audit, and modify other
SKILL.mdfiles. This creates a surface where instructions within those files could potentially influence the agent's logic during the audit or refactor process. - Ingestion points: Accesses
SKILL.mdfiles located in the workspace and the.atl/skill-registry.mdindex file. - Boundary markers: There are no explicit delimiters or instructions provided to the agent to disregard instructions found within the files it is auditing.
- Capability inventory: The skill can read and write local files and execute the
gentle-aiCLI tool. - Sanitization: No sanitization or safety-filtering of the content retrieved from audited skills is mentioned.
- [COMMAND_EXECUTION]: The skill triggers the execution of
gentle-ai skill-registry refreshto update its internal index of skills. This command is a project-specific utility for synchronizing the skill metadata.
Audit Metadata