skill-creator
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE] (SAFE): No malicious patterns or security vulnerabilities were identified in the provided scripts or documentation files.
- [COMMAND_EXECUTION] (SAFE): The
package_skill.pyandquick_validate.pyscripts perform local file system operations (reading, zipping, and path resolution) using standard Python libraries and do not execute untrusted shell commands or subprocesses. - [DYNAMIC_EXECUTION] (SAFE): The validation script uses
yaml.safe_load()to process frontmatter content fromSKILL.mdfiles, which correctly prevents arbitrary code execution through YAML tags during deserialization. - [DATA_EXFILTRATION] (SAFE): The skill contains no network-enabled code, ensuring that no local data can be transmitted to external servers.
- [PROMPT_INJECTION] (SAFE): Documentation files provide instructional templates but do not include directives that would attempt to override or bypass the agent's core safety instructions.
Audit Metadata