skill-creator
Pass
Audited by Gen Agent Trust Hub on Apr 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill frequently executes the
claudeCLI via subprocess inscripts/run_eval.pyandscripts/improve_description.pyto perform triggering evaluations and description optimization. Additionally,eval-viewer/generate_review.pyexecutes system commands likelsofto manage local network ports for its internal review server. - [INDIRECT_PROMPT_INJECTION]: The skill implements an evaluation loop that processes user-defined test prompts stored in
evals/evals.json. These prompts are executed as tasks via subagents or the CLI without explicit sanitization or strict boundary enforcement, creating a surface where malicious instructions within test data could potentially influence the agent's behavior during the evaluation process. - [EXTERNAL_DOWNLOADS]: The
eval-viewer/viewer.htmltemplate fetches theSheetJS(xlsx.full.min.js) library from thecdn.sheetjs.comCDN to enable browser-based previewing of spreadsheet outputs. This is a well-known service used for the intended purpose of the viewer.
Audit Metadata