skill-promoter

Pass

Audited by Gen Agent Trust Hub on Sep 7, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process experimental skill files from a sandbox directory for promotion to a canonical bundle. * Ingestion points: Sandbox skill directories, validation reports, and associated documentation files (SKILL.md, references, scripts). * Boundary markers: The skill specifies that experimental skills must have clear boundaries and pass validation, though it lacks explicit prompt-level delimiters for the ingestion process. * Capability inventory: File system operations including directory creation, copying files (cp), creating symlinks (ln -s), updating project configuration (skills-lock.json), and modifying documentation (provenance.md). * Sanitization: Relies on external validation tools (check-all.mjs and specific validation scripts) to verify skill integrity before and after promotion.
  • [COMMAND_EXECUTION]: Instructs the agent to execute local validation utilities to ensure the integrity of the skill bundle. * Evidence: Steps 1, 3, and 5 require running check-all.mjs and other validation scripts to verify the state of the sandbox and the canonical bundle. These are executed within the local project context.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 7, 2026, 03:00 AM
Security Audit — agent-trust-hub — skill-promoter