Security audit
Security checks for vulnerabilities and agentic risk
This skill scaffolds new agent-skill packages using a local Python script, with no evidence of hidden network access, credential use, persistence, or destructive behavior.
Before installing, understand that this skill is intended to create new files in a chosen output directory. Confirm the destination path before letting it scaffold, and review generated TODO templates before publishing or running any generated scripts.
The skill instructs the agent to generate a directory skeleton and explicitly run a scaffold script that creates files, but it does not declare any tool scope such as allowed-tools or permissions. That mismatch can let a host agent invoke the skill in contexts where file-write behavior is not clearly constrained or disclosed, increasing the chance of unintended filesystem modification.
The trigger phrases are very broad, such as general requests to 'help me create a new skill' or 'turn this workflow into a skill,' which overlap with ordinary assistance requests. In an auto-routing or loosely matched skill system, this can cause unintended invocation and lead the agent into file creation or script execution workflows the user did not specifically consent to.
The guidance explicitly encourages broad synonym coverage and inclusion of common user phrasings to maximize invocation recall, but it does not pair that advice with equally strong boundary-setting requirements. In a skill-creation context, this can produce SKILL.md descriptions that over-trigger on loosely related requests, causing the wrong skill to activate and increasing the chance of unintended file creation or workflow execution.
Skill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.
- Generate the skeleton before asking the user to write content
- Show the user what was generated and explain what each file is for
- Write draft content for the user to review rather than asking them to write from scratch
- Preserve the user's original intent; do not expand scope unless asked
- Always run the scaffold script rather than creating files manually
## Notes and Constraints
No suspicious patterns detected.