skill-creator
Pass
Audited by Gen Agent Trust Hub on Mar 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
subprocessmodule across multiple utility scripts, includingrun_eval.pyandrun_loop.py, to execute theclaudeCLI and manage local Python processes for evaluation. - [COMMAND_EXECUTION]: The
eval-viewer/generate_review.pyscript starts a local HTTP server using the standardhttp.serverlibrary to host a review interface for test results. - [EXTERNAL_DOWNLOADS]: The skill fetches data from
api.anthropic.comvia theanthropicPython client to optimize skill descriptions. The HTML viewer also references theSheetJSlibrary from a public CDN. - [DATA_EXFILTRATION]: Skill metadata and content are transmitted to the trusted Anthropic API to facilitate the iterative improvement of skill instructions and descriptions.
- [PROMPT_INJECTION]: The skill manages complex workflows involving user-provided test prompts and feedback, which creates a surface for indirect prompt injection. The skill instructions include safety guidelines and a 'Principle of Lack of Surprise' to discourage the creation of malicious skills.
Audit Metadata