skill-creator
Pass
Audited by Gen Agent Trust Hub on Mar 10, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes Python scripts (scripts/init_skill.py and scripts/package_skill.py) that perform essential file system operations, such as creating directories, writing template files, and generating ZIP archives. These actions are necessary for the skill's primary function as a project initializer and packager.\n- [COMMAND_EXECUTION]: The script scripts/init_skill.py modifies file permissions using chmod (0755) to ensure that generated script templates are executable, which is standard for development tools.\n- [SAFE]: The scripts/quick_validate.py utility correctly uses yaml.safe_load() to process skill metadata, which effectively prevents potential vulnerabilities related to unsafe YAML deserialization.
Audit Metadata