skill-creator
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/init_skill.pyandscripts/package_skill.pyscripts perform local file system operations including directory creation and file writing to manage skill project structures.- [PRIVILEGE_ESCALATION]: Thescripts/init_skill.pyscript applies executable permissions (chmod 0o755) to a newly generated template script. While expected for a developer tool, this involves programmatic modification of file permissions.- [DYNAMIC_EXECUTION]: The skill includes logic inscripts/init_skill.pyto generate new Python scripts based on embedded string templates.- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided descriptions and names to populate skill templates. 1. Ingestion points: User input for skill creation (SKILL.md). 2. Boundary markers: None present. 3. Capability inventory: File system writes, script generation, and permission modification inscripts/init_skill.py. 4. Sanitization: Minimal validation is performed on the inputskill_namebefore using it in path construction and file content.
Audit Metadata