skill-creator
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill facilitates automated testing and optimization by executing the agent's command-line interface (e.g.,
claude) usingsubprocessinscripts/improve_description.pyandscripts/run_eval.py. This allows it to programmatically evaluate skill descriptions and trigger logic. - [COMMAND_EXECUTION]: The script
eval-viewer/generate_review.pyusessubprocess.runto invoke thelsofutility for checking port availability when launching the local review server. - [DYNAMIC_EXECUTION]: The
scripts/init_skill.pyscript generates boilerplate Python code and markdown documentation to scaffold new skill projects. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-defined prompts and skill descriptions to perform trigger evaluations and automated improvements. 1. Ingestion points: User-defined queries and expectations within
evals/evals.json, as well as prompts processed byscripts/run_eval.py. 2. Boundary markers: The skill uses JSON serialization and YAML block scalars to delimit user content when constructing command files. 3. Capability inventory: Includes file system writes for scaffolding and shell command execution via the agent's CLI. 4. Sanitization: Relies on standard JSON and YAML library serialization for content interpolation.
Audit Metadata