skill-creator

Pass

Audited by Gen Agent Trust Hub on Apr 14, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes scripts (init_skill.py, package_skill.py) that perform local file system operations such as creating directories, writing files, and zipping folders. These are standard behaviors for project initialization and packaging tools and are initiated via user-provided arguments.
  • [DYNAMIC_EXECUTION]: The init_skill.py script generates placeholder Python scripts and Markdown files. This script generation is a core feature of the tool and uses static templates for local development, posing no inherent security risk as it does not execute untrusted logic.
  • [SAFE]: The skill uses yaml.safe_load() in quick_validate.py to parse metadata, preventing unsafe deserialization attacks. No network operations, hardcoded credentials, or obfuscated code were detected across the skill files.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 14, 2026, 02:52 AM