skill-writing
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill includes a utility script that dynamically creates new files and assigns them executable permissions.
- Evidence:
example_script.chmod(0o755)inscripts/init_skill.pyis used to make generated template scripts runnable. - [INDIRECT_PROMPT_INJECTION]: The validation logic processes external Markdown and YAML files, creating a surface for instructions embedded in data to potentially influence the agent's behavior during the validation workflow.
- Ingestion points:
scripts/quick_validate.pyreadsSKILL.mdand referenced files from a specified directory usingPath.read_text(). - Boundary markers: The script relies on standard YAML frontmatter delimiters (
---) and Markdown heading patterns. - Capability inventory: The skill has the capability to create directories and files (
init_skill.py), read file contents (quick_validate.py), and package files into archives (package_skill.py). - Sanitization: The script correctly uses
yaml.safe_load()to prevent unsafe deserialization of YAML data. - [COMMAND_EXECUTION]: The workflow instructions direct the agent to execute several Python-based validation and testing scripts.
- Evidence:
SKILL.mdcontains instructions to runscripts/validate_skill_engine.py,scripts/routing_smoke_test.py, andscripts/quick_validate.py.
Audit Metadata