agent-creator
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands to discover existing configurations and validate new agents. Evidence: Phase 1 utilizes
lsandcatto inspect agents in the.claude/agents/directory; Phase 7 and 8 utilizeuvx skilllintandclaude plugin validatefor system validation. - [EXTERNAL_DOWNLOADS]: The skill employs
uvxto fetch and run theskilllintpackage from the Python Package Index (PyPI) to ensure agent frontmatter compliance. PyPI is a standard and well-known service for this environment. - [PROMPT_INJECTION]: The skill displays an indirect prompt injection surface as it reads and adapts content from existing local agent files. Ingestion points: Reads all files in
.claude/agents/*.mdand~/.claude/agents/*.mdfor context gathering and adaptation. Boundary markers: Content is read without specific boundary delimiters or instructions to disregard embedded instructions. Capability inventory: The skill has permissions to write/edit files, execute shell commands, and manage subagents. Sanitization: No input sanitization or logic validation is performed on the content of the adapted files.
Audit Metadata