skill-creator
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a legitimate developer productivity tool for managing the lifecycle of other agent skills. It includes instructional material and templates that follow best practices for context engineering and progressive disclosure.
- [SAFE]: The included Python scripts (
init_skill.py,package_skill.py,quick_validate.py) perform standard filesystem operations such as directory creation, template instantiation, and archive generation. These scripts use safe path resolution and explicit encoding practices. - [SAFE]: The documentation regarding environment variable management (
.envfiles) describes a standard configuration hierarchy intended for developer tools. It provides guidance on secure secret management by encouraging the use of.env.examplefiles rather than hardcoding credentials. - [SAFE]: No patterns of prompt injection, data exfiltration, or code obfuscation were detected. The skill's behavior aligns entirely with its stated purpose of facilitating skill development.
Audit Metadata