Skills
skills/morning-start/coze-skills/book-skill-creator/Gen Agent Trust Hub

book-skill-creator

Warn

Audited by Gen Agent Trust Hub on Mar 5, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill facilitates the automated generation of executable Python and Bash scripts through scripts/docs_parser.py and scripts/batch_create.py. These scripts are created from templates and data extracted from documentation files.\n- [COMMAND_EXECUTION]: The scripts/skill_validator.py script performs runtime compilation checks of Python scripts using the py_compile module to ensure the generated code is syntactically correct.\n- [EXTERNAL_DOWNLOADS]: The scripts/web_searcher.py component is designed to interact with search tools to fetch and process external web content for extracting code patterns and best practices.\n- [PROMPT_INJECTION]: There is a risk of indirect prompt injection as scripts/docs_parser.py ingests untrusted documentation files (Markdown, HTML, OpenAPI). If these files contain malicious instructions disguised as documentation, they could be incorporated into the resulting skill packages.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 5, 2026, 07:36 PM