skill-creation
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill includes shell scripts like
scripts/validate-skill.shandexamples/complete-skill/examples/working-example.shthat automate the creation of skill directories and perform content validation using standard utilities such asgrepandsed. These scripts are intended for local development workflows and do not involve remote code execution. - [INDIRECT_PROMPT_INJECTION]: The
scripts/validate-skill.shutility processesSKILL.mdfiles provided as input (Ingestion Point: skill-path argument). It uses basic delimiters (Boundary Markers: YAML frontmatter ---) and regex validation for metadata, while performing file system operations (Capability Inventory: grep, sed, awk, find, chmod). The validation logic includes checks for mandatory fields and name patterns to ensure structural integrity (Sanitization: name regex verification), which is consistent with its role as a development tool.
Audit Metadata