create-custom-agent
Pass
Audited by Gen Agent Trust Hub on Mar 9, 2026
Risk Level: SAFE
Full Analysis
- Custom Agent Configuration: The skill provides a structured framework for creating specialized AI personas in VS Code. It guides the user through setting up YAML frontmatter to define agent properties like name, description, and available tools, which is standard behavior for custom agent development.
- Tooling and Capabilities: The instructions reference the use of built-in VS Code tools such as
search,fetch, andcodebase. These tools allow agents to interact with the local workspace and external web content as intended by the VS Code Copilot architecture. - Indirect Prompt Injection Surface: Like any skill that facilitates the creation of AI agents, the resulting agents will process external data (e.g., code, search results). While this skill provides a template for these agents, it is a point of consideration that the created agents should be configured with clear constraints to handle untrusted data securely.
- Ingestion points: Agents created using these templates process workspace files and user-provided prompts (documented in Step 5 and Step 6).
- Boundary markers: The provided templates do not explicitly enforce delimiters for external data, which is a common architectural pattern for these configuration files.
- Capability inventory: The skill identifies the use of
search,fetch, andcodebasetools (documented in Step 3). - Sanitization: The skill does not provide specific sanitization logic, as it serves as a documentation guide rather than an executable script.
Audit Metadata