new-skill
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
Bashtool to perform repository maintenance tasks, including listing existing skills and executing local validation scripts such asscripts/check-skill-integrity.pyandscripts/check-surface-sync.shto ensure repository consistency. - [EXTERNAL_DOWNLOADS]: The skill's documentation contains a reference to the
mattpocock/skillsrepository on GitHub, identifying it as a design source for the skill's implementation patterns. - [INDIRECT_PROMPT_INJECTION]: The skill implements a workflow that ingests external data to generate repository content, creating a potential surface for indirect prompt injection.
- Ingestion points: The skill collects user-provided purpose statements, trigger phrases, and arguments during the interview phase. It also reads the
templates/skill-template.mdfile and existing sibling skills from the.claude/skills/directory. - Boundary markers: The process includes a dedicated interview phase (Phase 1) where the agent gathers all information and confirms a design brief with the user before performing any write operations.
- Capability inventory: The skill uses the
Writetool to create newSKILL.mdfiles and theBashtool to run integrity checks. - Sanitization: The skill enforces strict parity between the body and frontmatter using the
check-skill-integrity.pyscript, ensuring that only declared flags and tools are permitted.
Audit Metadata