skill-authoring
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill guides the generation of new agent instructions and scripts based on user input gathered during an interview phase. This workflow creates a surface for indirect prompt injection if a user provides malicious instructions that the agent then incorporates into the drafted skill content. * Ingestion points: User responses during the Phase 1 Interview (described in
references/create.md) are used to synthesize skill drafts. * Boundary markers: The skill employs a structured five-phase development lifecycle and a mandatory Phase 5 Review checklist to validate output quality and safety. * Capability inventory: The agent is instructed to create and modify files, includingSKILL.md, Python scripts, and Markdown references, within the local workspace. * Sanitization: The instructions include 'self-critique loops' and 'absolute bans' lists to help the agent identify and remove problematic patterns during the drafting process.- [COMMAND_EXECUTION]: The instructions direct the agent to utilize common developer tools such asgrepfor searching project history andrufffor Python formatting and linting. These operations are appropriate for the intended development-focused use case.- [EXTERNAL_DOWNLOADS]: The skill references documentation hosted atagentskills.ioand suggests using theuvtool to manage theruamel.yamldependency for specific scripting tasks. These are documented neutrally as standard project dependencies.
Audit Metadata