skill-creator
Pass
Audited by Gen Agent Trust Hub on Mar 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The documentation describes the use of established development tools and utilities. Examples in
references/hooks.mdandreferences/mcp.mdillustrate the use ofnpxto execute formatters likeprettierand official MCP servers from the@modelcontextprotocolorganization. Additionally,references/ralph-loop.mdprovides instructions for installing the officialralph-loopplugin. - [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface in its initialization logic. Ingestion points: The
scripts/init_skill.pyscript accepts a<skill-name>argument from the command line. Boundary markers: The generated templates do not include explicit delimiters or instructions to ignore embedded commands. Capability inventory: The skill performs file system operations including directory creation and file writing viascripts/init_skill.py, and file reading and ZIP archiving viascripts/package_skill.py. Sanitization: The user-provided skill name is interpolated directly into templates using Python's.format()method without sanitization of the input content.
Audit Metadata