The Agent Skills Directory

[SAFE] (SAFE): The quick_validate.py script uses yaml.safe_load(), which is the secure way to parse YAML and prevents arbitrary code execution during deserialization.
[SAFE] (SAFE): The scripts perform validation on skill metadata (name and description), including length checks and character restrictions, reducing the risk of filesystem issues or metadata-based injection.
[SAFE] (SAFE): The package_skill.py script uses standard library functions to create ZIP archives and does not exhibit any command injection or privilege escalation vulnerabilities.

skill-creator