skill-builder

Pass

Audited by Gen Agent Trust Hub on Sep 28, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides a structured workflow and templates for creating agent extensions. The included validation script (scripts/validate-skill.py) follows security best practices by using yaml.safe_load() to process skill configuration data, preventing potential YAML deserialization vulnerabilities.
  • [SAFE]: All external links and installation instructions reference the official GitHub repository for the author (womendefiningai) or official Anthropic documentation. These are recognized as trusted vendor resources.
  • [INDIRECT_PROMPT_INJECTION]: The skill functions as a content generator that translates user requirements into structured instructions. While it relies on user input to populate templates, this behavior is central to its primary purpose as a builder tool and does not introduce unexpected autonomous capabilities.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 28, 2026, 10:56 AM