skill-creator
Pass
Audited by Gen Agent Trust Hub on Mar 4, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The
init_skill.pyscript useschmod(0o755)to set executable permissions on a dynamically created example script. While this is typical for a scaffolding tool, it represents an automated change to file permissions. - [SAFE]: The skill's scripts use
yaml.safe_load()for parsing configuration files, which prevents unsafe deserialization attacks. - [SAFE]: No external network connections, data exfiltration, or credential exposure were detected in the provided code.
- [SAFE]: The skill provides educational content and structural templates that follow established best practices for AI agent extensions.
Audit Metadata