skill-creator
Pass
Audited by Gen Agent Trust Hub on Feb 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE] (SAFE): The provided Python scripts (
package_skill.pyandquick_validate.py) perform standard file system operations and data validation. - File System Operations:
package_skill.pyuseszipfileto archive directory contents. It usesPath.resolve()andrglobcorrectly for path handling without exposing sensitive directories. - YAML Parsing:
quick_validate.pyusesyaml.safe_load()for parsing frontmatter, which is the recommended secure method for handling YAML data to prevent arbitrary code execution. - Prompt Patterns: The markdown files in
references/contain benign architectural guidance and examples for AI agents. They do not contain instructions that would bypass safety filters or exfiltrate data.
Audit Metadata