skill-creator
Pass
Audited by Gen Agent Trust Hub on Feb 16, 2026
Risk Level: LOW
Full Analysis
- [COMMAND_EXECUTION] (SAFE): No unauthorized system command execution or shell injection points were found. The scripts perform standard file and directory operations using built-in Python libraries such as
pathlibandzipfile.\n- [DATA_EXFILTRATION] (SAFE): No network operations or unauthorized data transmission patterns were identified. The packaging script creates a local .skill archive for distributable purposes.\n- [REMOTE_CODE_EXECUTION] (SAFE): The validation script correctly usesyaml.safe_load()to prevent arbitrary code execution during YAML parsing. No remote scripts are downloaded or executed.\n- [PROMPT_INJECTION] (SAFE): No patterns attempting to override system prompts or bypass safety guidelines were detected in the documentation or script comments.
Audit Metadata