comet-any
Warn
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill extensively uses the
cometCLI tool for project lifecycle management. Commands such ascomet creator guide,comet creator generate, andcomet publish distributeare used to initialize projects, record authoring evidence, and manage skill distribution. - [DYNAMIC_EXECUTION]: The skill generates and executes local JavaScript files (
.mjs) to manage workflow states and guardrails. It specifically instructs the agent to run scripts using variables, such asnode "$WORKFLOW_STATE" status, which represents a dynamic code execution pattern. - [INDIRECT_PROMPT_INJECTION]: The skill acts as a factory for new instructions, processing user goals and existing skill content to generate new logic.
- Ingestion points: User-provided workflow goals and content from candidate skills read via
comet skill show(documented inSKILL.md). - Boundary markers: The authoring process is structured into sequential waves (wave1, wave2) defined in
reference/authoring-protocol.jsonto separate content generation from script creation. - Capability inventory: Includes file system writes through
comet creator authoring-record, CLI command execution, and JavaScript execution vianode(documented inreference/subagents/script-author.md). - Sanitization: Employs a mandatory
skill-reviewbarrier as described inreference/subagents/skill-reviewer.md, which utilizes a multi-vote LLM process and automated evaluation (comet eval) to validate the generated skill bundle before it is marked as ready.
Audit Metadata