skill-creator
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a meta-utility designed to provide documentation and best practices for skill development. It does not contain any executable malicious code or dangerous instructions.
- [COMMAND_EXECUTION]: The instructions include standard shell commands such as
mkdirandtouchto initialize directory structures. It also suggests testing scripts as a quality assurance step during development. These operations are restricted to the local workspace and are appropriate for a developer-centric tool. - [PROMPT_INJECTION]: The skill includes defensive instructions for the skills it helps create, such as prohibiting XML tags (
<or>) in frontmatter to prevent parsing errors or injection, and forbidding the use of reserved names like 'claude' or 'anthropic'. - [DATA_INJECTION_SURFACE]: The skill serves as a framework for processing user input into structured documentation. While it facilitates the creation of new content, it emphasizes validation and specific formatting rules which help maintain the integrity of the generated skill files.
Audit Metadata