This skill can poison agent knowledge bases through malicious injection into
Claims to do
Skill Creator: A skill for creating new skills and iteratively improving them.
Actually does
This skill guides the creation and refinement of other skills. It involves writing `SKILL.md` files, defining test cases in `evals/evals.json`, and running subagents to execute these tests. It uses `eval-viewer/generate_review.py` to generate an HTML report for user feedback, `scripts.aggregate_benchmark` for performance metrics, and `scripts.run_loop` (which uses the `claude` CLI) to optimize skill descriptions. Finally, it can package skills using `scripts.package_skill`.
The skill's core function is to create and modify `SKILL.md` files and evaluation data (`evals.json`, `eval_metadata.json`). These artifacts serve as knowledge base components for other agents. If an attacker can inject malicious instructions or data into these created skill definitions or evaluation files, it could lead to poisoning the RAG or knowledge bases of agents that consume them.
Write the SKILL.md Save test cases to evals/evals.json Update the eval_metadata.json files and evals/evals.json with the assertions
The skill explicitly instructs to make skill descriptions 'a little bit "pushy"' to combat 'undertriggering' by other agents. While intended for benign functional improvement, this is a direct instruction to influence the triggering logic and autonomy of other agents, which could be abused if the skill's purpose were malicious.
Note: currently Claude has a tendency to "undertrigger" skills -- to not use them when they'd be useful. To combat this, please make the skill descriptions a little bit "pushy".
[](https://mondoo.com/ai-agent-security/skills/github/anthropics/skills/skill-creator)<a href="https://mondoo.com/ai-agent-security/skills/github/anthropics/skills/skill-creator"><img src="https://mondoo.com/ai-agent-security/api/badge/github/anthropics/skills/skill-creator.svg" alt="Mondoo Skill Check" /></a>https://mondoo.com/ai-agent-security/api/badge/github/anthropics/skills/skill-creator.svgSkills can read files, run commands, and access credentials. Mondoo helps organizations manage the security risks of AI agent skills across their entire fleet.