open-knowledge-write-skill
Pass
Audited by Gen Agent Trust Hub on Aug 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes platform-specific commands such as
write,edit,skills, andinstallinSKILL.mdto manage file operations and skill lifecycles. It also mentions usage of thenpx skillsCLI tool for skill discovery. - [EXTERNAL_DOWNLOADS]: Instructions in
SKILL.mddescribe importing skill content from theskills.shmarketplace and public GitHub repositories to support workflow reuse. - [INDIRECT_PROMPT_INJECTION]: The skill framework processes data from marketplace imports and user-provided instructions to generate local agent guidance.
- Ingestion points: Data is pulled from external sources using the
skills({ query })andimport({ source })functions described inSKILL.md. - Boundary markers: The skill provides optimization guidelines in
references/description-optimization.mdto ensure that descriptions act as specific triggers rather than generic summaries. - Capability inventory: The skill has the ability to write to project and global directories and modify file contents.
- Sanitization:
SKILL.mdcontains an explicit security reminder to only include executable scripts in thescripts/directory that have been thoroughly reviewed for safety.
Audit Metadata