skill-master
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_CONTEXT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill leverages
subprocesscalls inscripts/run_eval.py,scripts/improve_description.py, andeval-viewer/generate_review.pyto interact with theclaudeCLI for automated testing and to manage local server ports. These operations are scoped to intended functionality and target expected local utilities. - [DYNAMIC_EXECUTION]: The framework dynamically generates and manages files such as markdown instructions, skill templates, and HTML reports. For instance,
scripts/run_eval.pytemporary registers skills in.claude/commands/to evaluate triggering accuracy, which is standard procedure for skill development. - [INDIRECT_PROMPT_INJECTION]: The skill manages a surface for indirect prompt injection by processing untrusted outputs and transcripts from other agent runs during the evaluation phase.
- Ingestion points: Agent transcripts and generated output files are ingested by subagents as described in
agents/grader.mdandagents/analyzer.md. - Boundary markers: Instructional prompts use XML-style delimiters to separate system instructions from the content being analyzed.
- Capability inventory: The skill maintains the ability to execute
claudeCLI commands and perform local file operations. - Sanitization: Evaluation results are structured into JSON format, and the process relies on isolated subagent contexts to minimize risk.
- [DYNAMIC_CONTEXT_INJECTION]: The skill provides documentation and templates for the
!command`` syntax, which is a platform-supported feature for injecting shell output into context at skill load time. The examples provided (e.g.,gh pr diff) are contextually appropriate for developer tools and serve as educational material for skill authors.
Audit Metadata