create-moviepilot-skill

Pass

Audited by Gen Agent Trust Hub on Apr 22, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill defines a standard development workflow for managing project-specific skill files within the repository. No indicators of data exfiltration, credential theft, or malicious intent were detected.
  • [COMMAND_EXECUTION]: The workflow involves repository maintenance and file system operations using the agent's provided tools, which is consistent with the skill's stated purpose of scaffolding and validating code.
  • [PROMPT_INJECTION]: The skill processes untrusted user input to generate scripts and instructions. Mandatory Evidence Chain: 1. Ingestion points: User request (Step 1); 2. Boundary markers: Absent; 3. Capability inventory: write_file, edit_file, execute_command; 4. Sanitization: Absent. This attack surface is expected for a development-focused assistant and does not represent a malicious finding.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 22, 2026, 12:02 PM