skill-creator

Pass

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE] (SAFE): No malicious patterns or security vulnerabilities were identified in the provided scripts or documentation files.
  • [COMMAND_EXECUTION] (SAFE): The package_skill.py and quick_validate.py scripts perform local file system operations (reading, zipping, and path resolution) using standard Python libraries and do not execute untrusted shell commands or subprocesses.
  • [DYNAMIC_EXECUTION] (SAFE): The validation script uses yaml.safe_load() to process frontmatter content from SKILL.md files, which correctly prevents arbitrary code execution through YAML tags during deserialization.
  • [DATA_EXFILTRATION] (SAFE): The skill contains no network-enabled code, ensuring that no local data can be transmitted to external servers.
  • [PROMPT_INJECTION] (SAFE): Documentation files provide instructional templates but do not include directives that would attempt to override or bypass the agent's core safety instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 17, 2026, 06:34 PM