skill-creator
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE] (SAFE): The skill provides developer tools and documentation templates for skill creation.
- Packaging Script:
scripts/package_skill.pyuses standard Python libraries (zipfile,pathlib) to create skill archives. It includes a validation step and does not perform network operations or execute arbitrary shell commands. - Validation Script:
scripts/quick_validate.pyimplements a secure metadata validator. It usesyaml.safe_load()to prevent unsafe deserialization attacks and performs strict schema validation on theSKILL.mdfrontmatter. - Documentation: Files in the
references/directory provide templates and examples for output formatting and workflow structures. These are passive markdown files with no executable components. - No evidence of prompt injection, data exfiltration, obfuscation, or unauthorized remote code execution was found across the analyzed files.
Audit Metadata