skill-creator
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONPRIVILEGE_ESCALATION
Full Analysis
- [SAFE]: The skill provides documentation and automation for skill development.
- [COMMAND_EXECUTION]: The skill includes Python scripts (
init_skill.py,package_skill.py,quick_validate.py) for file management tasks like initialization and packaging. - Evidence: Use of standard library functions for file system access.
- Context: These scripts are intended for developer workflows and do not execute arbitrary commands or external code.
- [INDIRECT_PROMPT_INJECTION]: The
init_skill.pyscript generates content based on a user-provided skill name. - Ingestion points: The
<skill-name>argument inscripts/init_skill.pyused to populate the skill title and name. - Boundary markers: The generated
SKILL.mdtemplate uses[TODO: ...]markers to clearly delineate areas for user modification. - Capability inventory: The skill performs file writing and directory creation via
Path.mkdirandPath.write_textinscripts/init_skill.py. - Sanitization: The script uses
title_case_skill_nameto process input andPath.resolve()for path safety. - [PRIVILEGE_ESCALATION]: The
init_skill.pyscript applies executable permissions to a generated example script. - Evidence:
example_script.chmod(0o755)inscripts/init_skill.py. - Context: This is a standard and expected operation for making a script runnable in a new development environment.
Audit Metadata