pypi-readme-creator
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary purpose is to assist in documentation creation. All identified patterns (shell commands, file operations, external links) are directly related to this legitimate purpose and no malicious behaviors were found.\n- [EXTERNAL_DOWNLOADS]: The skill references well-known services and tools such as PyPI, GitHub, Read the Docs, and reputable Python packages including 'twine', 'uv', and 'sphinx-readme'. These references are standard for Python development workflows and originate from trusted or well-known sources.\n- [CREDENTIALS_UNSAFE]: The skill provides instructions for creating a '.pypirc' file to store PyPI tokens. It correctly uses placeholders for sensitive values and recommends setting restrictive file permissions ('chmod 600'), which is a security best practice for local credential management.\n- [COMMAND_EXECUTION]: Shell commands provided (e.g., 'uv build', 'twine check', 'sphinx-build') are standard utility calls for building, validating, and uploading Python packages, and do not present a security risk in the context of this skill.
Audit Metadata