skill-creator
Pass
Audited by Gen Agent Trust Hub on Mar 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill instructions and scripts are focused on legitimate development workflows. No patterns of prompt injection, data exfiltration, or credential theft were detected.\n- [SAFE]: The Python scripts (
init_skill.py,generate_openai_yaml.py, andquick_validate.py) perform standard file system operations related to project initialization. These actions are limited to creating folders, writing template files, and setting file permissions within the local development environment.\n- [SAFE]: Secure deserialization practices are followed; the scripts useyaml.safe_load()when reading configuration data from SKILL.md, preventing potential arbitrary code execution vulnerabilities during YAML processing.\n- [SAFE]: The use ofchmod 755in the initialization script is restricted to marking generated template scripts as executable, which is standard and expected behavior for a developer utility tool.
Audit Metadata