skill-share
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill performs legitimate automation for developer workflows, specifically creating file structures for AI skills and sending notifications via Slack. All activities are transparently described and serve the primary function of the skill.
- [INDIRECT_PROMPT_INJECTION]: The skill provides an interface for generating skill files based on user-provided metadata. Although it ingests external strings, this is the intended functionality. * Ingestion points: User-provided name and description fields used in SKILL.md generation. * Boundary markers: Absent from the documented template creation. * Capability inventory: Filesystem write (directory and file generation), packaging (ZIP creation), and network access (Slack API via Rube). * Sanitization: Not explicitly mentioned for user-provided description strings.
Audit Metadata