skill-creator
Pass
Audited by Gen Agent Trust Hub on Mar 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were identified. The skill provides clear instructions and utility scripts that are consistent with its stated purpose as a development tool.
- [COMMAND_EXECUTION]: The skill includes Python scripts (
scripts/init_skill.py,scripts/package_skill.py, andscripts/quick_validate.py) intended for initializing skill structures and packaging them into archives. These scripts perform legitimate local filesystem operations such as directory creation, template generation, and file zipping. - [REMOTE_CODE_EXECUTION]: No remote code execution patterns or untrusted data processing were detected. The skill uses the secure
yaml.safe_load()method in its validation script to prevent arbitrary code execution during metadata parsing.
Audit Metadata