create-skill

Pass

Audited by Gen Agent Trust Hub on Mar 4, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill invokes local project scripts via pnpm skills:sync and pnpm skills:check. These commands are used for administrative tasks like file synchronization and structure validation within the agent's development environment.\n- [PROMPT_INJECTION]: The workflow involves taking user input for skill names and descriptions to create new files. The skill mitigates potential risks by enforcing strict naming conventions (lowercase, digits, hyphens), which serves as a validation layer against path traversal or command injection during the file creation process.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 4, 2026, 02:32 PM