make-skill
Warn
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: MEDIUMDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [DYNAMIC_EXECUTION]: The skill instructs the agent to generate and execute custom scripts at runtime.
- The documentation guides the agent to create standalone Python (
.py) or Shell (.sh) files and execute them usingexecute_shell_commandorrun_tool_batchto automate data processing. - It encourages the use of inline command execution, such as
python3 -c "...", to replace manual agent judgment with rule-based automation. - [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it transforms conversational data into executable instructions.
- Ingestion points: The focus, description, and logic of the new skill are derived directly from the "current conversation, workflow, or troubleshooting path" as seen in
SKILL.md. - Boundary markers: The instructions do not define delimiters or specific instructions for processing potentially malicious data embedded in the conversation history.
- Capability inventory: The skill has access to powerful tools including
materialize_skill,execute_shell_command,run_tool_batch, andspawn_subagent. - Sanitization: The skill relies on an external security scanner within the
materialize_skilltool rather than implementing its own sanitization or validation of the input data. - [COMMAND_EXECUTION]: The skill relies on shell command execution for its primary automation logic.
- It instructs the agent to use
execute_shell_commandto run scripts for content extraction, filtering, and format conversion. - [EXTERNAL_DOWNLOADS]: The skill documentation references a public repository from a known organization.
- A reference to the Anthropic
skillsGitHub repository is included in the documentation comments as inspiration for the skill creator portion.
Audit Metadata