skill-builder
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides a structured workflow and templates for creating agent extensions. The included validation script (
scripts/validate-skill.py) follows security best practices by usingyaml.safe_load()to process skill configuration data, preventing potential YAML deserialization vulnerabilities. - [SAFE]: All external links and installation instructions reference the official GitHub repository for the author (womendefiningai) or official Anthropic documentation. These are recognized as trusted vendor resources.
- [INDIRECT_PROMPT_INJECTION]: The skill functions as a content generator that translates user requirements into structured instructions. While it relies on user input to populate templates, this behavior is central to its primary purpose as a builder tool and does not introduce unexpected autonomous capabilities.
Audit Metadata