skill-creator
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEDYNAMIC_CONTEXT_INJECTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_CONTEXT_INJECTION]: The skill implements and provides extensive documentation for using the
!commandsyntax to perform runtime environment probes. These probes (e.g., checking tool versions withcommand -vor verifying the presence of environment variables) are benign and serve the legitimate purpose of allowing the agent to adapt to the user's local setup. The skill acts as a developer guide for this platform feature. - [INDIRECT_PROMPT_INJECTION]: Because the skill generates new skill instructions based on user-provided requirements, it inherently possesses an ingestion surface for untrusted data. However, the skill employs structured templates, explicit defaults, and quality rubrics which help ensure that the generated output remains within safe operational boundaries.
Audit Metadata