skill-creation

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [DYNAMIC_EXECUTION]: The skill includes shell scripts like scripts/validate-skill.sh and examples/complete-skill/examples/working-example.sh that automate the creation of skill directories and perform content validation using standard utilities such as grep and sed. These scripts are intended for local development workflows and do not involve remote code execution.
  • [INDIRECT_PROMPT_INJECTION]: The scripts/validate-skill.sh utility processes SKILL.md files provided as input (Ingestion Point: skill-path argument). It uses basic delimiters (Boundary Markers: YAML frontmatter ---) and regex validation for metadata, while performing file system operations (Capability Inventory: grep, sed, awk, find, chmod). The validation logic includes checks for mandatory fields and name patterns to ensure structural integrity (Sanitization: name regex verification), which is consistent with its role as a development tool.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 08:19 PM