wk-skill
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external markdown files located in the
$WK_SKILLS_HOME/learnings/directory and incorporates that content directly into the 'Common Mistakes' section of the newly created skill. - Ingestion points: Markdown files scanned via
findandgrepin Step 3 ofSKILL.md. - Boundary markers: No explicit delimiters or instructions are used to separate the interpolated content from the skill's primary instructions.
- Capability inventory: The skill possesses the ability to write to the file system, execute shell commands, and register new agent skills via
npx. - Sanitization: Content from the external learning files is placed into the new skill without any validation, filtering, or escaping.- [COMMAND_EXECUTION]: The skill performs various file system and environment management tasks using shell commands.
- Evidence: Uses
mkdir -pto create directories,testfor environment checks, andfind/grepto search through local files.- [DYNAMIC_EXECUTION]: The skill generates new executable instruction files and associated metadata at runtime. - Evidence: Step 6 involves programmatically writing the complete content of a new
SKILL.mdandREADME.mdto the local filesystem.- [EXTERNAL_DOWNLOADS]: The skill uses a package manager to verify and install the generated skill. - Evidence: Executes
npx skills addin Step 8 to register the newly created skill with the agent environment.
Audit Metadata