skill-creator
Pass
Audited by Gen Agent Trust Hub on Mar 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security vulnerabilities or malicious patterns were identified in the skill instructions or scripts.- [SAFE]: Secure YAML Parsing: The script
quick_validate.pyutilizesyaml.safe_load(), which prevents arbitrary code execution during the processing of skill metadata.- [SAFE]: Localized File Operations: The utility scripts (init_skill.py,package_skill.py) perform directory creation and file bundling using standardpathlibandzipfilemodules, targeting local user-specified paths.- [SAFE]: Benign Command Execution: The use ofchmodininit_skill.pyis restricted to making the newly generated boilerplate scripts executable within the skill's local directory structure.
Audit Metadata