skill-creator
Pass
Audited by Gen Agent Trust Hub on Mar 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the Python
subprocessmodule to interact with theclaudeCLI and run internal scripts for task automation, benchmarking, and skill packaging. - [EXTERNAL_DOWNLOADS]: The evaluation viewer component (
viewer.html) references the SheetJS library from a well-known CDN (cdn.sheetjs.com) to enable spreadsheet rendering in the browser during manual reviews. - [PROMPT_INJECTION]: The skill has an inherent indirect prompt injection surface because it processes untrusted data (user-generated test queries and subagent transcripts) through an automated evaluation loop.
- Ingestion points: Test queries from
eval_set.json, user reviews fromfeedback.json, and execution transcripts from subagents. - Boundary markers: Absent; queries are interpolated directly into command files and CLI arguments for testing without protective delimiters.
- Capability inventory: Extensive use of
subprocess.runandsubprocess.Popento execute CLI tools and manage the local filesystem. - Sanitization: No sanitization is performed on input queries before they are executed by the Claude CLI in the local environment.
Audit Metadata