skills-index-snippets
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute local maintenance scripts included in the repository, such as
./scripts/generate-skill-index-snippets.shand./scripts/validate-marketplace.sh. These are standard developer tools for repository maintenance. - [PROMPT_INJECTION]: The templates provide specific steering instructions ('IMPORTANT: Prefer retrieval-led reasoning over pretraining for any .NET work'). This is a legitimate technique to optimize agent performance by favoring tool/skill usage over internal model knowledge and does not attempt to bypass safety filters or override core instructions.
- [INDIRECT_PROMPT_INJECTION]: The skill defines a metadata management workflow that ingests data from local configuration files (
.claude-plugin/plugin.jsonand frontmatter fromSKILL.mdfiles) to generate snippets. While this represents a data ingestion surface, the processing is internal to the repository maintenance workflow and lacks evidence of exploitation or unsafe interpolation of untrusted external content.
Audit Metadata