skill-creator
Pass
Audited by Gen Agent Trust Hub on Mar 16, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/init_skill.pyscript performs local file system operations, including directory creation and writing template files to a user-specified path. It also modifies file permissions usingchmod 0o755for generated scripts, which is a standard requirement for making them executable within the skill framework.\n- [COMMAND_EXECUTION]: Thescripts/package_skill.pyscript utilizes the standardzipfilelibrary to archive skill contents into.skillfiles for distribution. This is a legitimate administrative task consistent with the skill's purpose.\n- [SAFE]: Thescripts/quick_validate.pyscript employsyaml.safe_load()to parse frontmatter metadata fromSKILL.mdfiles. This is a security best practice that prevents arbitrary code execution during YAML deserialization.\n- [SAFE]: All identified Python scripts rely exclusively on the Python standard library and the commonPyYAMLpackage, with no evidence of unauthorized external network calls or remote code downloads.
Audit Metadata