skill-creator

Pass

Audited by Gen Agent Trust Hub on Feb 16, 2026

Risk Level: LOW
Full Analysis
  • [COMMAND_EXECUTION] (SAFE): No unauthorized system command execution or shell injection points were found. The scripts perform standard file and directory operations using built-in Python libraries such as pathlib and zipfile.\n- [DATA_EXFILTRATION] (SAFE): No network operations or unauthorized data transmission patterns were identified. The packaging script creates a local .skill archive for distributable purposes.\n- [REMOTE_CODE_EXECUTION] (SAFE): The validation script correctly uses yaml.safe_load() to prevent arbitrary code execution during YAML parsing. No remote scripts are downloaded or executed.\n- [PROMPT_INJECTION] (SAFE): No patterns attempting to override system prompts or bypass safety guidelines were detected in the documentation or script comments.
Audit Metadata
Risk Level
LOW
Analyzed
Feb 16, 2026, 08:15 AM