skills/bluebagai/skills/skill-creator/Gen Agent Trust Hub

skill-creator

Pass

Audited by Gen Agent Trust Hub on Feb 21, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE] (SAFE): The provided Python scripts (package_skill.py and quick_validate.py) perform standard file system operations and data validation.
  • File System Operations: package_skill.py uses zipfile to archive directory contents. It uses Path.resolve() and rglob correctly for path handling without exposing sensitive directories.
  • YAML Parsing: quick_validate.py uses yaml.safe_load() for parsing frontmatter, which is the recommended secure method for handling YAML data to prevent arbitrary code execution.
  • Prompt Patterns: The markdown files in references/ contain benign architectural guidance and examples for AI agents. They do not contain instructions that would bypass safety filters or exfiltrate data.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 21, 2026, 08:21 AM