skill-creator
Pass
Audited by Gen Agent Trust Hub on Mar 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill acts as a meta-tool for skill development, containing standard utility scripts (init_skill.py, package_skill.py, quick_validate.py) that handle file system organization and packaging.
- [SAFE]: Metadata validation in quick_validate.py correctly uses yaml.safe_load() to prevent potential code execution vulnerabilities during the parsing of SKILL.md frontmatter.
- [SAFE]: No network-based exfiltration or remote resource fetching patterns were identified in the provided Python scripts or documentation.
- [SAFE]: The scripts follow the principle of least privilege, only interacting with files and directories intended for the skill being created or packaged.
Audit Metadata