skill-creator
Fail
Audited by Gen Agent Trust Hub on Feb 26, 2026
Risk Level: CRITICAL
Full Analysis
- [SAFE]: The skill is a legitimate framework for skill development and does not contain any malicious instructions or unauthorized data access logic.
- [COMMAND_EXECUTION]: The skill includes Python scripts (
scripts/init_skill.py,scripts/package_skill.py, andscripts/quick_validate.py) intended for local development workflows. These scripts perform routine file system tasks such as directory creation, file writing, and archiving (zipping) within user-specified paths. - [EXTERNAL_DOWNLOADS]: Documentation in
SKILL.mdcontains illustrative examples of file structures that include names like 'product.md'. While automated scanners may flag these as suspicious URLs, they are static text references used for organizational guidance and do not represent active network requests or remote code execution.
Recommendations
- Contains 1 malicious URL(s) - DO NOT USE
Audit Metadata