skill-factory
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes session data from
git logandgit diffto extract patterns. This untrusted data could theoretically contain instructions intended to influence the sub-agents. The skill mitigates this through a four-stage human-in-the-loop review process (Phase 1 selection, Phase 2 similarity decision, Phase 3 blueprint approval, and Phase 5 registration). - [DYNAMIC_EXECUTION]: As part of its core functionality, the skill generates new executable scripts and instructions. It includes a validation step where the sub-agent
duriis instructed to execute these newly created scripts (e.g., using--helpor--dry-run) to ensure they are functional before registration. - [COMMAND_EXECUTION]: The skill executes local shell commands to scan the existing skill inventory and analyze the current git workspace. These operations are restricted to the user's project directory and the standard Claude Code configuration directory (
~/.claude).
Audit Metadata