skill-creator

Pass

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION] (SAFE): The script package_skill.py uses standard Python libraries (zipfile, pathlib) to create archive files. It does not utilize os.system or subprocess to execute arbitrary commands.
  • [DATA_EXFILTRATION] (SAFE): The scripts perform local file operations necessary for their stated purpose. There are no network calls (curl, requests) or patterns indicating data exfiltration to external domains.
  • [CREDENTIALS_UNSAFE] (SAFE): No hardcoded API keys, tokens, or sensitive credentials were found in any of the scripts or documentation files.
  • [PROMPT_INJECTION] (SAFE): The documentation files (skill-design-patterns.md and skill-quality-checklist.md) contain instructional content for developers and do not include instructions designed to override agent behavior or bypass safety filters.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 17, 2026, 09:51 PM