skill-developer
Pass
Audited by Gen Agent Trust Hub on Mar 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use the
Bashtool for filesystem operations, including creating directories in.claude/skills/, copying files, and listing directory contents. - [REMOTE_CODE_EXECUTION]: The skill facilitates the creation and runtime execution of Python scripts using the
uv runcommand and theruntime.harnessmodule. It provides templates for scripts that call Model Context Protocol (MCP) tools. - [PROMPT_INJECTION]: The skill acts as a meta-tool for generating new agent skills from user input, which presents an indirect prompt injection surface. A user could potentially provide malicious logic or instructions that the agent then formalizes into a persistent skill.
- Ingestion points: User prompts and scripts supplied for conversion into new skills.
- Boundary markers: No explicit delimiters or instructions to ignore embedded commands are provided in the skill generation guidelines.
- Capability inventory: The skill leverages
Bash,Read,Write, andEdittools to modify the environment and run code. - Sanitization: The instructions do not define any sanitization or validation processes for the content of the generated skills.
Audit Metadata