writing-great-skills
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze, revise, and review other agent skills, which involves ingesting untrusted instruction sets and scripts.
- Ingestion points: Found in
SKILL.mdandreferences/package.md, where the agent is instructed to review externalSKILL.mdfiles, references, and associated scripts. - Boundary markers: The instructions lack explicit guidance on using delimiters or safety warnings to ignore instructions contained within the skills being analyzed.
- Capability inventory: The skill includes validation steps in
SKILL.md("Run changed scripts") andreferences/package.md("scripts execute successfully"), which suggests the agent is expected to execute code associated with the reviewed skills. - Sanitization: There are no instructions for sanitizing or escaping content from analyzed skills before processing.
- [EXTERNAL_DOWNLOADS]: The skill references policy documentation from well-known technology providers to guide package validation.
Audit Metadata