The Agent Skills Directory

[SAFE] (SAFE): No security issues detected. The code performs legitimate local file management tasks.
File Operations: The package_skill.py script uses the zipfile module and pathlib for creating archives. It uses relative_to to ensure correct path mapping within the ZIP file without risk of directory traversal during creation.
Validation Logic: The quick_validate.py script implements a check for naming conventions (hyphen-case) and content sanitization (disallowing < and > in descriptions), which serves as a basic preventative measure against XSS or schema confusion in interfaces that might display the skill metadata.
Dependency Analysis: Both scripts rely exclusively on the Python standard library (sys, zipfile, pathlib, os, re). No external or untrusted packages are imported.
Execution Context: The scripts do not perform network requests, access sensitive system paths (like ~/.ssh), or execute arbitrary shell commands.

skill-creator