skill-creator
Pass
Audited by Gen Agent Trust Hub on Mar 15, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes Python scripts (scripts/init_skill.py and scripts/package_skill.py) that perform local file system operations, including creating directories, writing template files, and packaging contents into zip archives. These actions are restricted to the local workspace and are necessary for the skill's primary function.
- [SAFE]: In scripts/quick_validate.py, the skill uses yaml.safe_load() to process metadata, which effectively prevents vulnerabilities associated with unsafe YAML deserialization.
- [COMMAND_EXECUTION]: The scripts/init_skill.py script applies executable permissions (chmod 0o755) to generated example scripts, which is standard behavior for initializing development templates.
Audit Metadata