create-skill
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes several utility scripts (
scripts/run_eval.py,scripts/improve_description.py,scripts/package_skill.py) that perform shell command execution usingsubprocess.run(). run_eval.pyandimprove_description.pyexecute theclaudeCLI to run prompts for benchmarking and optimization purposes.package_skill.pyexecutes a local validation script to ensure skill integrity before archiving.- [EXTERNAL_DOWNLOADS]: The workflow fetches live specifications and research data from several external domains using the
WebFetchtool. - It fetches core specifications from
agentskills.ioand best practices fromplatform.claude.com(Anthropic). - It performs research by fetching content from
skills.shand reference implementations from theanthropics/skillsGitHub repository. - These downloads target well-known documentation sources and trusted organizations as part of its core functionality.
- [DYNAMIC_EXECUTION]: The skill is designed to generate and execute dynamic content as part of its lifecycle.
- It generates new
SKILL.mdfiles and associated scripts based on user descriptions and fetched specifications. - The evaluation system executes this generated content using the
claudeCLI to verify task completion and trigger accuracy. - [INDIRECT_PROMPT_INJECTION]: The skill possesses a significant attack surface for indirect prompt injection due to its processing of untrusted external content and user inputs into generated instructions.
- Ingestion points: Data is ingested via
WebFetchfrom multiple external sources and viaAskUserQuestionfrom the user. - Boundary markers: The workflow utilizes
EnterPlanModeto require explicit user approval of a blueprint before any files are written, and includes an 'Anti-Hallucination' section for verification logic. - Capability inventory: The skill has access to
Bash,Write,Edit,WebFetch, andTasktools across its various phases. - Sanitization: The skill relies on user-in-the-loop approval and a static validator script to ensure the generated skill meets structural requirements.
Audit Metadata