skill-creator

Pass

Audited by Gen Agent Trust Hub on Apr 16, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses subprocess.run() and subprocess.Popen() in eval-viewer/generate_review.py and scripts/run_eval.py to facilitate its core functions, such as launching an HTTP server for results review and executing claude -p commands for skill testing. These are legitimate development tools for the intended workflow.
  • [EXTERNAL_DOWNLOADS]: The skill fetches the SheetJS library (xlsx.full.min.js) via CDN in eval-viewer/viewer.html to enable spreadsheet rendering within the evaluation viewer. This is a well-known service used for its official purpose.
  • [SAFE]: No malicious patterns, obfuscation, or unauthorized data exfiltration were detected. The skill provides clear documentation on its operations and follows best practices for secret management by recommending .env files.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 16, 2026, 01:05 PM