skill-creator
Pass
Audited by Gen Agent Trust Hub on Mar 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses Python's
subprocessmodule to run local utilities (aggregate_benchmark.py,run_loop.py,package_skill.py) and interacts with theclaudeCLI to perform trigger evaluations and automated benchmarks. - [COMMAND_EXECUTION]: The
generate_review.pyscript executes system commandslsofandkillto manage the local network port (default 3117) required for its results viewer interface. - [EXTERNAL_DOWNLOADS]: The
viewer.htmltemplate includes a reference to the SheetJS library hosted on a well-known CDN (cdn.sheetjs.com) to enable spreadsheet parsing and visualization in the browser-based review report. - [DATA_EXFILTRATION]: The skill starts a local HTTP server on the loopback interface (
127.0.0.1) to serve evaluation data to the user for qualitative review. This server is private to the local machine and is used for its intended UI functionality.
Audit Metadata