cekura-create-agent
Use when the user asks to "create an agent", "create a new agent", "set up an agent", "walk me through creating an agent", "connect my agent", "create a main agent", "set up a main agent", "add my main agent to Cekura", "configure my main agent", "connect my main agent", "import my agent from another platform", "create an agent from an exported config", "set up mock tools", "add tools to my agent", "upload knowledge base", "configure integration", "connect VAPI", "connect Retell", "connect LiveKit", "connect ElevenLabs", "add dynamic variables", or needs to connect a voice AI agent to the Cekura platform for testing or observability. Covers the full agent setup flow: project selection, provider selection, basics and connection type, description, main agent creation, mock tools, knowledge base, dynamic variables, and advanced configuration.
64
81%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
Low
Low-risk findings worth noting
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
The required workflow ingests outsider-authored agent prompts and configuration data when importing from external voice providers (VAPI, Retell, ElevenLabs, Bland, Synthflow) or reading external MCP servers.
W012: Unverifiable external dependency detected (runtime URL that controls agent).
What this means
The skill fetches instructions or code from an external URL at runtime, and the fetched content directly controls the agent’s prompts or executes code. This dynamic dependency allows the external source to modify the agent’s behavior without any changes to the skill itself.
Why it was flagged
The skill instructs the agent to install Python and Node packages (`pip install`, `npm install`) from third-party repositories during setup and execution, which constitutes an operational runtime dependency with common/reputable unofficial provenance.
- Repository
cekura-ai/cekura-skills
- Revision
523fe2c
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.