create-package-skill
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches and executes tooling from the getcolors GitHub organization (github.com/getcolors/skills).
- [COMMAND_EXECUTION]: Utilizes shell commands for repository management, DNS modification, and cloud provisioning.
- [REMOTE_CODE_EXECUTION]: The skill uses npx to fetch and execute external skills from the getcolors GitHub repository.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests context from project documentation files.
- Ingestion points: Reads CLAUDE.md and README files from repositories.
- Boundary markers: No delimiters or warnings are used for ingested content.
- Capability inventory: High permissions for file writing, repository management, and cloud provisioning.
- Sanitization: No content validation is performed on documentation inputs.
Audit Metadata