skill-authoring-workflow
Pass
Audited by Gen Agent Trust Hub on Mar 10, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: No security threats or malicious patterns were detected in the skill content. The workflow follows standard repository maintenance practices.
- [COMMAND_EXECUTION]: The skill executes various local scripts (e.g.,
./scripts/find-a-skill.sh,./scripts/add-a-skill.sh,./scripts/build-a-skill.sh,./scripts/test-a-skill.sh,python3 scripts/check-skill-metadata.py, and./scripts/zip-a-skill.sh) to perform its stated purpose. These are internal repository utilities used for content automation. - [DATA_EXFILTRATION]: The skill does not perform any network operations or access sensitive configuration files.
- [PROMPT_INJECTION]: The instructions are clear, functional, and do not attempt to override the AI agent's core safety protocols or bypass constraints.
Audit Metadata