create-skill-test
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill involves the execution of local development tools and scripts to validate test specifications. This includes using
dotnet runto execute the repository's internalSkillValidatorproject, performingdotnet buildto verify test fixtures, and runningpythonscripts to check evaluation quality. These operations are restricted to local paths within the project structure (such as theeng/directory) and are consistent with the skill's primary function as a testing and scaffolding tool. - [INDIRECT_PROMPT_INJECTION]: The skill operates by ingesting existing skill and agent documentation to generate new evaluation scenarios, which presents a potential surface for indirect instruction influence.
- Ingestion points: The skill reads existing skill content from
SKILL.mdor.agent.mdfiles located in theplugins/directory to understand the target's capabilities (detailed in the 'Workflow' section). - Boundary markers: The instructions explicitly require the agent to generate stimuli and rubrics that avoid using the target skill's specific vocabulary or terminology, which serves as a delimiter to prevent overfitting and accidental instruction mimicry.
- Capability inventory: Capabilities include executing local C# projects (
dotnet run), running shell commands for environment setup and fixture validation, and executing local Python scripts for quality checks. - Sanitization: All generated evaluation files are subjected to structural and quality checks through the
skill-validatortool and thecheck_eval_quality.pyscript, which enforce schema compliance and detect structural defects before the specifications are accepted.
Audit Metadata