skill-creator-pro
Pass
Audited by Gen Agent Trust Hub on May 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The evaluation viewer component (
eval-viewer/viewer.html) loads the SheetJS library from a well-known CDN (cdn.sheetjs.com) to enable spreadsheet rendering for evaluation results. - [COMMAND_EXECUTION]: The skill uses Python's
subprocessmodule to execute system commands. Specifically,scripts/run_eval.pyinvokes theclaudeCLI to test skill triggering behavior, andeval-viewer/generate_review.pyuseslsofto manage local server ports. - [REMOTE_CODE_EXECUTION]: The description optimization module (
scripts/improve_description.py) interacts with the Anthropic API to generate improved skill descriptions based on test results. - [DATA_EXFILTRATION]: While the skill reads local project files and sends skill descriptions to the Anthropic API for optimization, this behavior is documented and strictly aligned with its primary function as a skill-creator tool.
- [INDIRECT_PROMPT_INJECTION]: The skill has a surface for indirect prompt injection because it processes user-supplied test queries from
evals.jsonand passes them to subagents for grading and analysis. However, this is a necessary part of its function as an evaluation tool.
Audit Metadata