skill-refine
Pass
Audited by Gen Agent Trust Hub on Jun 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
Bashtool to perform administrative tasks such as listing directory contents (ls) and calculating file line counts (wc). It also manages the lifecycle of scripts found within the target skills being audited. - [EXTERNAL_DOWNLOADS]: The skill employs
WebSearchandWebFetchto research domain-specific information. It fetches external content to ensure that the refined skills incorporate current industry standards and best practices. - [PROMPT_INJECTION]: The skill is subject to indirect prompt injection risks (Category 8) because it processes untrusted content from the skills it audits.
- Ingestion points: The agent reads the
SKILL.mdand all associated reference files of the target skill being refined (Phase 1). - Boundary markers: Absent. The skill does not explicitly instruct the agent to use delimiters or ignore instructions found within the target files.
- Capability inventory: The skill has access to
Bash,Write,Edit,WebSearch, andWebFetch(SKILL.md). - Sanitization: Absent. There is no mechanism described to sanitize or validate the content of the target skill before it is used to drive research or file edits.
Audit Metadata