skill-generator
Facilitates the creation of new Claude Code skills with configurable execution modes for efficient skill scaffolding and workflow building.
Install this skill
Security score
The skill-generator skill was audited on Jun 11, 2026 and we found 15 security issues across 1 threat category. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 221 | const workDir = `.workflow/.scratchpad/skill-gen-${timestamp}`; |
Template literal with variable interpolation in command context
| 222 | Write(`${workDir}/skill-config.json`, JSON.stringify(config)); |
Template literal with variable interpolation in command context
| 225 | const skillDir = `.claude/skills/${config.skill_name}`; |
Template literal with variable interpolation in command context
| 226 | Bash(`mkdir -p "${skillDir}/phases" "${skillDir}/specs" "${skillDir}/templates"`); |
Template literal with variable interpolation in command context
| 227 | Write(`${skillDir}/SKILL.md`, generateSkillEntry(config)); |
Template literal with variable interpolation in command context
| 231 | Write(`${skillDir}/phases/_orchestrator.md`, generateOrchestrator(config)); |
Template literal with variable interpolation in command context
| 232 | Write(`${skillDir}/workflow.json`, generateWorkflowDef(config)); |
Template literal with variable interpolation in command context
| 234 | Write(`${skillDir}/phases/${phase.id}.md`, generatePhase(phase, config)); |
Template literal with variable interpolation in command context
| 237 | Write(`${skillDir}/phases/orchestrator.md`, generateAutonomousOrchestrator(config)); |
Template literal with variable interpolation in command context
| 238 | Write(`${skillDir}/phases/state-schema.md`, generateStateSchema(config)); |
Template literal with variable interpolation in command context
| 240 | Write(`${skillDir}/phases/actions/${action.id}.md`, generateAction(action, config)); |
Template literal with variable interpolation in command context
| 245 | Write(`${skillDir}/specs/${config.skill_name}-requirements.md`, generateRequirements(config)); |
Template literal with variable interpolation in command context
| 246 | Write(`${skillDir}/specs/quality-standards.md`, generateQualityStandards(config)); |
Template literal with variable interpolation in command context
| 251 | Write(`${skillDir}/validation-report.json`, JSON.stringify(validation)); |
Template literal with variable interpolation in command context
| 252 | Write(`${skillDir}/README.md`, generateReadme(config, validation)); |