skill-creator
Pass
Audited by Gen Agent Trust Hub on Mar 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the Python
subprocessmodule across several scripts (e.g.,run_eval.py,package_skill.py) to execute theclaudeCLI and system utilities likelsofandkillfor managing evaluation runs and local viewer instances.- [EXTERNAL_DOWNLOADS]: The evaluation viewer template (viewer.html) loads the SheetJS (xlsx) library from thecdn.sheetjs.comcontent delivery network. This well-known service is used to render spreadsheet files generated during evaluations within the browser.- [DATA_EXFILTRATION]: As part of its optimization loop,improve_description.pytransmits the content of theSKILL.mdfile and evaluation metrics to the Anthropic API. This data transmission is the core intended functionality for generating improved skill metadata through a trusted vendor service.- [PROMPT_INJECTION]: The skill manages an environment for running user-provided test prompts through subagents. This creates an indirect prompt injection surface where the skill creator processes potentially untrusted data from evaluation query files (evals.json) and passes it into an executable context.
Audit Metadata