agent-creator

Pass

Audited by Gen Agent Trust Hub on Sep 11, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the Bash tool to execute a local validation script (validate-skill.py) located in a sibling directory (../skill-creator/scripts/). This is standard behavior for a meta-tooling skill that provides automated compliance checks for generated files.
  • [EXTERNAL_DOWNLOADS]: The skill references the official Anthropic Agent Specification documentation from a well-known service domain (code.claude.com). This reference is used for information purposes and to guide the agent in following the correct schema.
  • [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface for indirect prompt injection because it ingests user-provided text (agent descriptions) and reads external files (existing agents) to perform validation. However, the skill explicitly includes a validation workflow and schema checks to ensure the generated content adheres to the 16-field Anthropic schema, which acts as a structured boundary.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 11, 2026, 02:20 PM