skills/stolinski/skills/skill-writer/Gen Agent Trust Hub

skill-writer

Pass

Audited by Gen Agent Trust Hub on Apr 25, 2026

Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [PROMPT_INJECTION]: The skill is designed to ingest and synthesize external data (documentation, repositories, and web content) into executable agent instructions, which creates a surface for indirect prompt injection. This surface is documented in 'references/synthesis-path.md'. The skill includes mitigations by explicitly instructing the agent to treat external content as untrusted data and apply trust and safety rules during the ingestion process.
  • [COMMAND_EXECUTION]: The documentation in 'EVAL.md' and 'references/registration-validation.md' describes workflows that involve local command execution using tools like 'codex exec' and 'uv run'. These are documented as developer-controlled steps for testing and validating generated skills.
  • [EXTERNAL_DOWNLOADS]: The skill references external specifications and upstream repositories (e.g., 'github.com/anthropics/skills', 'agentskills.io') for synchronization and provenance tracking. These references target well-known and trusted technology organizations.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 25, 2026, 01:14 AM