tk-wizard
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and act upon setup criteria delegated from other skills, referred to as consumer handoffs.
- Ingestion Points: Handoff data provided by calling skills as defined in the
references/consumer-handoffs.mdschema. - Boundary Markers: Instructions mandate strictly bounded handoffs and utilize explicit status tokens (e.g., Pending, Blocked, Unverifiable) to manage the session state and prevent unintended execution.
- Capability Inventory: Capabilities include file system operations (writing/reading restricted
.tigerkit/paths), dynamic script generation, and command execution usingnpx,bash, andshellcheck. - Sanitization: The skill requires any generated helper scripts to be statically validated with
bash -nandshellcheckbefore being presented to the user. - [EXTERNAL_DOWNLOADS]: The documentation references external tools and repositories for environment configuration.
- Package Reference: The skill suggests a conceptual default for browser provider setup using
npx -y chrome-devtools-mcp@latest. The use of the@latesttag is an unversioned dependency pattern. - Repository Reference: The
references/upstream-distillation.mdfile acknowledges the skill's origin athttps://raw.githubusercontent.com/mattpocock/skills/main/skills/engineering/wizard/SKILL.md. - [DYNAMIC_EXECUTION]: The skill facilitates the creation and verification of runtime-generated scripts.
- Evidence: The instructions guide the agent to create one-time "user-run helpers" to assist the user with specific tasks. Safety is managed through mandatory shell syntax checking (
bash -n) and static analysis (shellcheck) to ensure the generated code is correct and safe for the user to run. - [COMMAND_EXECUTION]: The skill instructions involve executing shell commands to verify environment state and validate scripts.
- Evidence: Utilizes
git ls-filesandgit check-ignoreto verify the safety of secret storage paths, andbash -n/shellcheckto validate dynamically created helper scripts.
Audit Metadata