skill-creator
Pass
Audited by Gen Agent Trust Hub on Feb 16, 2026
Risk Level: LOW
Full Analysis
- [SAFE] (SAFE): No malicious patterns or security vulnerabilities were found. The provided files consist of documentation and administrative tools for skill developers.
- [COMMAND_EXECUTION] (LOW): The packaging utility performs local file system operations (directory traversal and zip creation) which are standard for its purpose. These operations lack remote access or exfiltration capabilities.
- [EXTERNAL_DOWNLOADS] (INFO): The validation script depends on the PyYAML library. The implementation correctly utilizes yaml.safe_load() to ensure that the parsing of YAML frontmatter is performed securely, preventing potential code execution via unsafe tags.
Audit Metadata