skill-master
Pass
Audited by Gen Agent Trust Hub on Mar 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill documents and utilizes the
!commandsyntax for dynamic context injection, which allows shell commands to be executed by the agent to gather live system or project state. This is a core feature of the Agentskills specification. - [COMMAND_EXECUTION]: The
improve_description.pyandrun_eval.pyscripts execute theclaudeCLI tool via the Pythonsubprocessmodule to perform automated skill evaluation and description optimization loops. - [EXTERNAL_DOWNLOADS]: The 'Docs Ingestion Workflow' described in
references/docs-ingestion.mdinvolves an autonomous loop that fetches external content from remote URLs to summarize and create reference notes. This uses the agent's fetching capabilities for legitimate documentation aggregation. - [PROMPT_INJECTION]: The
improve_description.pyscript processes untrusted skill content by interpolating it into a meta-prompt for optimization. This represents an indirect prompt injection surface (Category 8), which the script attempts to mitigate by using XML-like tags to delimit untrusted data and instructing the model to focus on the optimization task.
Audit Metadata