skill-creator

Pass

Audited by Gen Agent Trust Hub on Mar 3, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/init_skill.py performs local filesystem operations, including directory creation (mkdir) and writing template files to set up the skill structure.\n- [COMMAND_EXECUTION]: The scripts/package_skill.py script uses the standard zipfile module to archive local skill folders into .skill files for distribution.\n- [COMMAND_EXECUTION]: The initialization utility applies executable permissions (0o755) to generated script templates to ensure they are ready for user modification and execution.\n- [COMMAND_EXECUTION]: The validation script scripts/quick_validate.py implements secure YAML parsing via yaml.safe_load to verify skill metadata without risk of code execution from configuration files.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 3, 2026, 04:41 AM