Security audit
Security checks for vulnerabilities and agentic risk
This skill is a straightforward helper for drafting and saving new skill files, with only minor disclosure and trigger-scope caveats.
Before installing, understand that this skill is meant to draft and potentially save new SKILL.md files. Review any generated skill carefully, especially its trigger conditions, requested tools, credentials, shell commands, and network access, before adding it to your agent or publishing it.
The trigger phrases are broad enough that the skill may activate in ordinary discussion about creating skills, not only when the user intends to invoke this specific meta-skill. Overbroad activation can cause unintended instruction injection into unrelated workflows and may lead an agent to generate or save files unexpectedly in the wrong context.
The skill's SECURITY CONSIDERATIONS section asserts it does not modify files, yet the documented workflow and output explicitly describe creating a directory and writing SKILL.md to disk. This mismatch can mislead users and downstream reviewers about the skill's actual side effects, reducing scrutiny around filesystem writes and making unsafe automation easier to approve.
No suspicious patterns detected.
