skill-create
Pass
Audited by Gen Agent Trust Hub on Apr 15, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands via the
Bashtool to scan the project directory and identify technology stacks and patterns. - [INDIRECT_PROMPT_INJECTION]: The skill derives instructions for newly generated skills from project-local data, which could be influenced by malicious content in the scanned files.
- Ingestion points: The skill reads
CLAUDE.md,.bkit/btw-suggestions.json, and various project source files. - Boundary markers: No specific delimiters or safety instructions are used to isolate untrusted content during the skill generation process.
- Capability inventory: The skill leverages
Bash,Write, andEdittools to perform its analysis and file creation. - Sanitization: File content ingested during analysis is not sanitized before being incorporated into generated skill instructions.
Audit Metadata