build-a-skill
Pass
Audited by Gen Agent Trust Hub on Mar 1, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides examples for using a CLI tool named
askillfor various tasks like initialization (askill init), validation (askill validate), and local testing (askill add,askill run). These are standard functional instructions for the intended developer use case. - [CREDENTIALS_UNSAFE]: The documentation includes a command example for logging into a registry (
askill login --token ...). This command uses a clear placeholder string (ask_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx) which follows safe documentation practices and does not contain hardcoded secrets. - [EXTERNAL_DOWNLOADS]: The skill references standard package management commands like
npm ciand publishing flows to GitHub. These references are part of the documented development workflow and do not represent hidden or unauthorized remote code execution.
Audit Metadata