skill-forge
Warn
Audited by Gen Agent Trust Hub on Mar 19, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
subprocessmodule in scripts such asrun_eval_claude.pyandrun_eval_codex.pyto invoke local CLI tools with user-defined queries and skill content. - [EXTERNAL_DOWNLOADS]: The skill manages dependencies via
uvand fetches the SheetJS library from a public CDN to support spreadsheet rendering in the evaluation viewer. - [PROMPT_INJECTION]: By processing and iterating on user-provided
SKILL.mdandevals.jsonfiles, the skill is exposed to indirect prompt injection where instructions within the skill-under-development could attempt to override the agent's behavior during testing or optimization.
Audit Metadata