skill-creator
Pass
Audited by Gen Agent Trust Hub on Feb 16, 2026
Risk Level: LOW
Full Analysis
- [SAFE] (SAFE): No malicious patterns were identified in the provided files. The skill serves as a development toolkit.
- [COMMAND_EXECUTION] (LOW): The Python scripts are utility tools meant for local execution by a developer. They handle file system paths safely and perform expected zipping/validation operations without invoking subshells or external processes.
- [DATA_EXFILTRATION] (SAFE): The script
package_skill.pyreads local files to create a compressed archive. It does not perform any network operations or access sensitive system directories (e.g., ~/.ssh). - [DYNAMIC_EXECUTION] (LOW): The script
quick_validate.pyusesyaml.safe_load()for parsing frontmatter. This is a secure practice that prevents arbitrary code execution during YAML deserialization.
Audit Metadata