skill-creator
Pass
Audited by Gen Agent Trust Hub on Mar 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a robust workflow for skill development, including evaluation cycles and description optimization. All scripts (
aggregate_benchmark.py,generate_report.py,package_skill.py, etc.) perform legitimate development tasks such as data processing, file packaging, and local reporting. - [COMMAND_EXECUTION]: The skill uses
subprocess.Popenandos.killineval-viewer/generate_review.pyandscripts/run_eval.pyto manage a local development server and executeclaude -pfor testing. These are standard operations for a local development tool and do not involve untrusted input execution. - [EXTERNAL_DOWNLOADS]: The
eval-viewer/viewer.htmlfile includes references to Google Fonts and a well-known CDN (SheetJS oncdn.sheetjs.com). These are used for UI rendering and spreadsheet processing in the local review tool, which is standard and safe. - [DATA_EXFILTRATION]: No evidence of unauthorized data transfer was found. Network operations are limited to a local HTTP server (
127.0.0.1) used for the evaluation viewer and legitimate API calls to Anthropic for the description optimization feature.
Audit Metadata