skill-qa
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
npx tsx scripts/validate-skill.tsto perform linting and structure checks on SKILL.md files. It also usesgit fetchto retrieve content from specified branches. - [EXTERNAL_DOWNLOADS]: The skill's installation instructions utilize
npx skills addto download the skill builder from the author's repository athttps://github.com/peter-tu-zynkr/zynkr-skill-builder. - [DYNAMIC_EXECUTION]: The skill uses
tsxto execute a local TypeScript script (validate-skill.ts) for processing skill files. This is a core component of the skill's validation logic. - [INDIRECT_PROMPT_INJECTION]: The skill ingests and analyzes content from external
SKILL.mdfiles (paths, slugs, or branches). - Ingestion points: Reads
SKILL.mdfiles from the local filesystem or fetched git branches. - Boundary markers: Boundary markers are absent in the prompt instructions.
- Capability inventory: File system reads, file system writes (for auto-fixes with confirmation), and
git fetchoperations. - Sanitization: The skill relies on an external TypeScript engine (
validate-skill.ts) to parse and validate content rather than direct LLM interpretation of raw file text.
Audit Metadata