skill-creator
Pass
Audited by Gen Agent Trust Hub on Feb 16, 2026
Risk Level: LOW
Full Analysis
- [SAFE] (SAFE): No malicious behavior detected across all threat categories. The scripts are well-structured utility files using standard Python libraries for file system operations.
- [COMMAND_EXECUTION] (SAFE): No subprocess or shell command execution found.
- Evidence: The code uses standard libraries like
pathlibandzipfilefor directory traversal and archiving without invoking external binaries. - [DATA_EXFILTRATION] (SAFE): No network access or data exfiltration patterns detected.
- Evidence: There are no imports of networking modules (e.g.,
requests,urllib,socket) and no logic to access sensitive system files like SSH keys or environment variables. - [PROMPT_INJECTION] (SAFE): No natural language instructions or prompt manipulation logic present.
- Evidence: The scripts exclusively perform metadata validation via restrictive regular expressions and do not interpolate untrusted data into prompts.
Audit Metadata