skill-creator

Pass

Audited by Gen Agent Trust Hub on Mar 8, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides utility scripts scripts/init_skill.py and scripts/package_skill.py intended for use by the agent. These scripts perform standard file system operations such as directory creation, template writing, and ZIP archive generation to support the skill development workflow.
  • [COMMAND_EXECUTION]: scripts/init_skill.py applies executable permissions (chmod 0o755) to a generated placeholder script, which is a standard procedure for creating executable utilities.
  • [SAFE]: scripts/quick_validate.py utilizes yaml.safe_load() for parsing frontmatter, which correctly prevents unsafe deserialization vulnerabilities.
  • [SAFE]: The validation logic in scripts/quick_validate.py includes regex checks for naming conventions and length constraints on metadata fields, effectively sanitizing inputs that are used in file path construction or interpolated into templates.
  • [SAFE]: No evidence of prompt injection, data exfiltration, or obfuscated code was found across the analyzed files. All external logic is transparent and aligned with the skill's stated purpose.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 8, 2026, 08:36 PM