skill-creator
Pass
Audited by Gen Agent Trust Hub on Mar 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's core logic is focused on facilitating the development lifecycle of other skills. Analysis of the Python scripts (init_skill.py, package_skill.py, quick_validate.py) confirms that they perform standard file system operations consistent with their described functions. No malicious logic, unauthorized data access, or exfiltration attempts were detected.
- [COMMAND_EXECUTION]: The included scripts use standard Python libraries for file and directory management. The 'init_skill.py' script uses 'chmod 755' specifically to make generated template scripts executable for the user, which is appropriate for a developer tool. The 'package_skill.py' script uses the 'zipfile' module to bundle files, which is a benign operation.
- [EXTERNAL_DOWNLOADS]: The skill does not perform any network operations or external downloads. It relies exclusively on standard Python modules and the 'pyyaml' library for configuration validation.
- [CREDENTIALS_UNSAFE]: There is no evidence of hardcoded credentials, API keys, or attempts to access sensitive system files like SSH keys or environment variables.
Audit Metadata