skillpack-creator
Pass
Audited by Gen Agent Trust Hub on Mar 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/scaffold_skillpack.pyinvokessubprocess.runto execute thenpxcommand for packaging tasks. The execution uses a fixed list of arguments and runs within the context of the generated pack directory. - [EXTERNAL_DOWNLOADS]: The skill utilizes
npxto retrieve and run the@cremini/skillpackutility. This tool is provided by the skill's author (CreminiAI) and is used for its intended purpose of zipping the created SkillPack. - [PROMPT_INJECTION]: The skill has a surface for indirect prompt injection (Category 8) as it processes data from previously completed tasks to generate new skill instructions.
- Ingestion points: Completed task workflows and deliverables (referenced in
SKILL.mdStep 1). - Boundary markers: The skill instructs the agent to 'normalize' and 'clean' the source task, but explicit delimiters for the source data are not defined.
- Capability inventory: File system writes and shell command execution via
scripts/scaffold_skillpack.py. - Sanitization: The instructions advise removing 'exploratory transcript' noise and 'dead ends', which provides a degree of manual filtering by the agent.
Audit Metadata