skill-creator

Pass

Audited by Gen Agent Trust Hub on Mar 16, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The scripts/init_skill.py script performs local file system operations, including directory creation and writing template files to a user-specified path. It also modifies file permissions using chmod 0o755 for generated scripts, which is a standard requirement for making them executable within the skill framework.\n- [COMMAND_EXECUTION]: The scripts/package_skill.py script utilizes the standard zipfile library to archive skill contents into .skill files for distribution. This is a legitimate administrative task consistent with the skill's purpose.\n- [SAFE]: The scripts/quick_validate.py script employs yaml.safe_load() to parse frontmatter metadata from SKILL.md files. This is a security best practice that prevents arbitrary code execution during YAML deserialization.\n- [SAFE]: All identified Python scripts rely exclusively on the Python standard library and the common PyYAML package, with no evidence of unauthorized external network calls or remote code downloads.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 16, 2026, 09:57 PM