skill-creator
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
subprocessmodule to orchestrate its workflow and manage background tasks. scripts/run_eval.pyusessubprocess.Popento execute evaluation queries via theclaude -pcommand.scripts/improve_description.pyusessubprocess.runto callclaude -pfor generating improved skill descriptions.eval-viewer/generate_review.pyusessubprocess.runto calllsoffor port management andos.killto manage the lifecycle of the local review server.- [DYNAMIC_EXECUTION]: The tool is designed to dynamically generate and test skill content.
- It writes new
SKILL.mddefinitions to the filesystem and registers them as commands in the.claude/commands/directory to evaluate triggering behavior. - It spawns specialized subagents (grader, analyzer, comparator) to programmatically assess and improve generated outputs.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user data as part of its core evaluation purpose, creating a surface for indirect injection.
- Ingestion points: Data enters the context via evaluation queries in
evals/evals.jsonand the output files generated by test runs. - Boundary markers: The subagents are instructed to evaluate these outputs; however, explicit delimiters or warnings for the processed data are not consistently present in the subagent prompts.
- Capability inventory: The skill has broad capabilities, including file system access, CLI execution, and subagent orchestration.
- Sanitization: The skill relies on standard YAML/JSON parsing and the specific instructions provided to the subagents in
agents/grader.mdandagents/analyzer.mdto mitigate risks. - [EXTERNAL_DOWNLOADS]: The evaluation viewer fetches an external library from a well-known service to provide additional functionality.
- The
eval-viewer/viewer.htmltemplate includes thexlsx(SheetJS) library fromcdn.sheetjs.comto enable the rendering of spreadsheet files within the browser interface.
Audit Metadata