cekura-create-agent
Use when the user asks to "create an agent", "create a new agent", "set up an agent", "walk me through creating an agent", "connect my agent", "create a main agent", "set up a main agent", "add my main agent to Cekura", "configure my main agent", "connect my main agent", "import my agent from another platform", "create an agent from an exported config", "set up mock tools", "add tools to my agent", "upload knowledge base", "configure integration", "connect VAPI", "connect Retell", "connect LiveKit", "connect ElevenLabs", "add dynamic variables", or needs to connect a voice AI agent to the Cekura platform for testing or observability. Covers the full agent setup flow: project selection, provider selection, basics and connection type, description, main agent creation, mock tools, knowledge base, dynamic variables, and advanced configuration.
60
70%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Low
Low-risk findings worth noting
Fix and improve this skill with Tessl
tessl review fix ./cekura/skills/cekura-create-agent/SKILL.mdW011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
The workflow reads KB files and provider agent configurations that may contain outsider-authored content, but the agent must actively search or fetch them, falling into the low-risk category.
W012: Unverifiable external dependency detected (runtime URL that controls agent).
What this means
The skill fetches instructions or code from an external URL at runtime, and the fetched content directly controls the agent’s prompts or executes code. This dynamic dependency allows the external source to modify the agent’s behavior without any changes to the skill itself.
Why it was flagged
The skill references an external repository locator (`https://github.com/cekura-ai/llm-websocket-server-example.git`) which is cloned, built, and executed at runtime to serve as an operational WebSocket server dependency.
- Repository
- cekura-ai/cekura-skills
- Commit
66ac4c0
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.