skill-creator
Pass
Audited by Gen Agent Trust Hub on Apr 18, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill's core scripts (
run_eval.py,improve_description.py,run_loop.py) utilizesubprocessto call theclaudeCLI tool. This is the primary mechanism for executing test queries and performing description optimization within the platform's environment. - [COMMAND_EXECUTION]: The
generate_review.pyutility uses thelsofcommand to identify and terminate existing processes on its target port (default 3117) before starting the local evaluation viewer. - [EXTERNAL_DOWNLOADS]: The
viewer.htmlfile includes a script tag pointing tocdn.sheetjs.comto load the SheetJS library. This is a well-known technology used locally within the viewer to render spreadsheet outputs (.xlsxfiles) for the developer to review. - [DATA_EXPOSURE]: The evaluation viewer starts a local HTTP server on
127.0.0.1to allow developers to review outputs. It reads files from the specific iteration workspace directory and embeds them (including images and text) into the served HTML. This data handling is scoped to the local development environment.
Audit Metadata