skill-creator

Pass

Audited by Gen Agent Trust Hub on Feb 16, 2026

Risk Level: LOW
Full Analysis
  • [SAFE] (SAFE): No malicious patterns were identified in the provided files. The skill serves as a development toolkit.
  • [COMMAND_EXECUTION] (LOW): The Python scripts are utility tools meant for local execution by a developer. They handle file system paths safely and perform expected zipping/validation operations without invoking subshells or external processes.
  • [DATA_EXFILTRATION] (SAFE): The script package_skill.py reads local files to create a compressed archive. It does not perform any network operations or access sensitive system directories (e.g., ~/.ssh).
  • [DYNAMIC_EXECUTION] (LOW): The script quick_validate.py uses yaml.safe_load() for parsing frontmatter. This is a secure practice that prevents arbitrary code execution during YAML deserialization.
Audit Metadata
Risk Level
LOW
Analyzed
Feb 16, 2026, 08:40 AM