skill-creator
Pass
Audited by Gen Agent Trust Hub on Mar 3, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/init_skill.pyperforms local filesystem operations, including directory creation (mkdir) and writing template files to set up the skill structure.\n- [COMMAND_EXECUTION]: Thescripts/package_skill.pyscript uses the standardzipfilemodule to archive local skill folders into.skillfiles for distribution.\n- [COMMAND_EXECUTION]: The initialization utility applies executable permissions (0o755) to generated script templates to ensure they are ready for user modification and execution.\n- [COMMAND_EXECUTION]: The validation scriptscripts/quick_validate.pyimplements secure YAML parsing viayaml.safe_loadto verify skill metadata without risk of code execution from configuration files.
Audit Metadata