skill-creator
Pass
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill performs local command execution of bundled Python scripts (such as
scripts.run_loop,scripts.aggregate_benchmark, andscripts.package_skill) and manages background processes using shell commands likenohupandkillto support its benchmarking and review functionality.\n- [REMOTE_CODE_EXECUTION]: The skill orchestrates subagents (claude-with-access-to-the-skill) to run test cases in parallel. This remote execution is confined to the agent's testing environment for the purpose of validating skill performance.\n- [PROMPT_INJECTION]: The skill facilitates the generation of instructions for other agents, creating a potential surface for indirect prompt injection. However, it explicitly instructs the model to adhere to the 'Principle of Lack of Surprise' and refuse requests intended to facilitate malicious activities or unauthorized access.
Audit Metadata