playbook-creator
Pass
Audited by Gen Agent Trust Hub on Aug 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installation involves fetching content from the author's repository using the
npx skills addcommand. The suggested library dependencies within the generated prompts include well-known services such as Supabase and Stripe.- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied app concepts and PRDs to generate its instructions. - Ingestion points: User-provided text describing application requirements (
SKILL.md). - Boundary markers: The skill instructs the agent to save the generated playbook as a standalone markdown file (
SKILL.md). - Capability inventory: File system write access for saving the generated playbook; no network or subprocess execution within the skill itself.
- Sanitization: None specified for input text, though the output follows strict structural mandates.
Audit Metadata