skill-creator
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [Prompt Injection] (LOW): The skill is a surface for indirect prompt injection (Category 8) because it facilitates writing user-provided text into new agent instructions.
- Ingestion points: User input is used to populate variables like {skill-name}, {description}, and {Trigger} in the SKILL.md template.
- Boundary markers: Absent; the skill does not instruct the agent to use delimiters or ignore embedded instructions when processing user-provided metadata.
- Capability inventory: The skill definition allows the use of high-privilege tools including
Bash,Write, andEdit. - Sanitization: Absent; the templates do not include instructions for the agent to validate or escape external content before interpolation.
Audit Metadata