skill-creator

Warn

Audited by Runlayer on Feb 24, 2026

Risk Level: MEDIUM
Scan Summary
Max Score
78%
Files
8
Flagged
8
Chunks
13
Flagged Files (8)
SKILL.mdHIGH
78.3%

Malicious tool definition detected

Tool: SKILL.md [1/3] Description: --- name: skill-creator description: Guide for creating effective skills for AI coding agents working with Azure SDKs and Microsoft Foundry services. Use when creating new skills or updating existing skills.

Tool: SKILL.md [2/3] Description: match the latest SDK version ``` ### Step 2: Understand the Skill Gather concrete examples: - "What SDK operations should this skill cover?" - "What triggers should activate this skill?" - "What errors do developers commonly encounter?" | Example Task | Reusable Resource | |--------------|-------------------| | Same auth code each time | Code example in SKILL.md | | Complex streaming patterns | `references/streaming.md` | | Tool configurations | `references/tool

Tool: SKILL.md [3/3]

references/acceptance-criteria.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/acceptance-criteria.md [1/2] Description: # Skill Creator Acceptance Criteria **Skill**: `skill-creator` **Purpose**: Guide for creating effective skills for AI coding agents **Focus**: SKILL.md format, YAML frontmatter, bundled resources, Azure SDK patterns --- ## 1. SKILL.md Structure ### 1.1 ✅ CORRECT: Complete SKILL.md with Frontmatter ```markdown --- name: azure-example-py description: | Azure Example SDK for Python.

Tool: references/acceptance-criteria.md [2/2] Description: = DefaultAzureCredential() client = AgentsClient( endpoint=os.environ["PROJECT_ENDPOINT"], credential=credential ) # Create agent agent = client.create_agent( model="gpt-4o", name="my-agent", instructions="You are a helpful assistant." ) # Cleanup client.delete_agent(agent.id) ``` ### 9.2 ❌ INCORRECT: Incomplete Examples ```python # Create agent agent = client.create_agent(...) # What parameters?

references/azure-sdk-patterns.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/azure-sdk-patterns.md [1/2] Description: # Azure SDK Patterns by Language Reference for creating skills that teach agents to write code following official Azure SDK guidelines.

Tool: references/azure-sdk-patterns.md [2/2]

references/output-patterns.mdHIGH
78.3%

Malicious tool definition detected

references/workflows.mdHIGH
78.3%

Malicious tool definition detected

scripts/init_skill.pyHIGH
78.3%

Malicious tool definition detected

Tool: scripts/init_skill.py [2/2] Description: Path to created skill directory, or None if error """ # Determine skill directory path skill_dir = Path(path).resolve() / skill_name # Check if directory already exists if skill_dir.exists(): print(f"❌ Error: Skill directory already exists: {skill_dir}") return None # Create skill directory try: skill_dir.mkdir(parents=True, exist_ok=False) print(f"✅ Created skill directory: {skill_dir}") except Exception as e: print(f"❌ Error creating directory: {e

scripts/package_skill.pyHIGH
76.3%

Malicious tool definition detected

Tool: scripts/package_skill.py Description: #!/usr/bin/env python3 """ Skill Packager - Creates a distributable .skill file of a skill folder Usage: python utils/package_skill.py <path/to/skill-folder> [output-directory] Example: python utils/package_skill.py skills/public/my-skill python utils/package_skill.py skills/public/my-skill ./dist """ import sys import zipfile from pathlib import Path from quick_validate import validate_skill def package_skill(skill_path, output_dir=None): """ Package

scripts/quick_validate.pyHIGH
76.3%

Malicious tool definition detected

Tool: scripts/quick_validate.py Description: #!/usr/bin/env python3 """ Quick validation script for skills - minimal version """ import sys import os import re import yaml from pathlib import Path def validate_skill(skill_path): """Basic validation of a skill""" skill_path = Path(skill_path) # Check SKILL.md exists skill_md = skill_path / 'SKILL.md' if not skill_md.exists(): return False, "SKILL.md not found" # Read and validate frontmatter content = skill_md.read_text() if not content.startswit

Audit Metadata
Max File Score
78%
Classification
KNOWN_SERVER_KNOWN_TOOL_LIST
Files Scanned
8
Files Flagged
8
Chunks Analyzed
13
Analyzed
Feb 24, 2026, 08:56 AM
Security Audit — runlayer — skill-creator