review-a-skill
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
npx ai-agent-skillstool to perform administrative actions such as previewing content, validating structure, and curating skill metadata within a catalog. - [INDIRECT_PROMPT_INJECTION]: The skill identifies a workflow for processing external skill data, creating a potential surface for indirect prompt injection. * Ingestion points: External skills are ingested via the
previewandvalidatecommands inSKILL.md. * Boundary markers: The instructions explicitly advise the agent to monitor for sanitization flags and qualitatively evaluate safety. * Capability inventory: The skill uses CLI tools to manage the lifecycle of other agent skills. * Sanitization: Relies on the automated sanitization provided by thepreviewcommand and subsequent agent/human validation.
Audit Metadata