skills/kunhai-88/skills/skill-creator/Gen Agent Trust Hub

skill-creator

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The scripts/init_skill.py and scripts/package_skill.py scripts perform local file system operations including directory creation and file writing to manage skill project structures.- [PRIVILEGE_ESCALATION]: The scripts/init_skill.py script applies executable permissions (chmod 0o755) to a newly generated template script. While expected for a developer tool, this involves programmatic modification of file permissions.- [DYNAMIC_EXECUTION]: The skill includes logic in scripts/init_skill.py to generate new Python scripts based on embedded string templates.- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided descriptions and names to populate skill templates. 1. Ingestion points: User input for skill creation (SKILL.md). 2. Boundary markers: None present. 3. Capability inventory: File system writes, script generation, and permission modification in scripts/init_skill.py. 4. Sanitization: Minimal validation is performed on the input skill_name before using it in path construction and file content.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 9, 2026, 02:39 PM