create-skill
Pass
Audited by Gen Agent Trust Hub on Mar 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes local project scripts via
pnpm skills:syncandpnpm skills:check. These commands are used for administrative tasks like file synchronization and structure validation within the agent's development environment.\n- [PROMPT_INJECTION]: The workflow involves taking user input for skill names and descriptions to create new files. The skill mitigates potential risks by enforcing strict naming conventions (lowercase, digits, hyphens), which serves as a validation layer against path traversal or command injection during the file creation process.
Audit Metadata