agile-skill-build
Pass
Audited by Gen Agent Trust Hub on Mar 3, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides two Python scripts (
scripts/scaffold.pyandscripts/build.py) intended for local execution to automate development tasks. - [FILE_SYSTEM_OPERATIONS]: The scripts interact with the local file system to create directory structures and aggregate content from markdown files into an
AGENTS.mdfile. - [DYNAMIC_PATH_CONFIGURATION]: Both scripts dynamically modify the Python
sys.pathto include the project root, enabling imports from the vendor's local engine (src.engine). - [INDIRECT_PROMPT_INJECTION]: The
scaffold.pyscript accepts user-provided input via the--nameand--patharguments, andbuild.pyprocesses external markdown content. While this represents a data ingestion surface, the implementation serves the skill's primary purpose as a build tool without malicious intent.
Audit Metadata