open-knowledge-write-skill
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides a mechanism to fetch and adapt content from external marketplace URLs and GitHub repositories to create new skill definitions. This creates an ingestion surface where instructions from remote sources could influence the agent during the authoring process.
- Ingestion points: The skill utilizes an
importtool to ingest data from user-providedsourceURLs (e.g., fromskills.shor specific repositories) into the agent's context. - Boundary markers: The instructions guide the agent to inspect descriptions before importing, but do not provide specific markers or safety delimiters to isolate imported body content from the agent's own instructional hierarchy.
- Capability inventory: The skill has access to significant filesystem capabilities through the
write,edit, anddeletetools. - Sanitization: The skill includes a 'Reminders' section that explicitly warns the user to only include executable scripts in a skill if they have been manually reviewed.
- [EXTERNAL_DOWNLOADS]: The skill facilitates downloading content from the
skills.shmarketplace and official vendor repositories to support its core authoring functionality. - [COMMAND_EXECUTION]: The instructions recommend using
npx skillsas a discovery and management method, which involves the execution of external packages via the Node Package Runner.
Audit Metadata