skill-creator
Warn
Audited by Gen Agent Trust Hub on Mar 12, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The utility scripts
scripts/run_eval.pyandscripts/improve_description.pyexecute theclaudeCLI using thesubprocessmodule to perform evaluations and optimization tasks. - [COMMAND_EXECUTION]: The evaluation viewer (
eval-viewer/generate_review.py) usessubprocessto call system utilitieslsofandkillfor port management when starting its local HTTP server. - [REMOTE_CODE_EXECUTION]: The skill's intended workflow involves generating and executing scripts (primarily Python) within the workspace to automate evaluations and verify task assertions.
- [EXTERNAL_DOWNLOADS]: The evaluation viewer's HTML template (
eval-viewer/viewer.html) loads the SheetJS library from the well-known CDNcdn.sheetjs.comto enable spreadsheet rendering.
Audit Metadata