create-yourself

Pass

Audited by Gen Agent Trust Hub on Apr 3, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the Bash tool to run local Python utilities for data parsing and file management. These scripts (wechat_parser.py, qq_parser.py, photo_analyzer.py, skill_writer.py, etc.) perform legitimate processing of user-provided files and do not execute arbitrary or remote commands.
  • [DATA_EXFILTRATION]: While the skill processes highly sensitive personal information, including messaging logs and GPS data from photos, analysis of the Python scripts confirms that all data handling is local. The extracted information is used to populate markdown files within the designated skill directory (.claude/skills/), and no network operations are present in the code to transmit this data externally.
  • [PROMPT_INJECTION]: The skill employs prompt templates designed to extract persona traits and memories. These instructions guide the agent to act as a digital clone of the user. While this involves role-playing, the instructions are scoped to the generated sub-skills and do not attempt to override the underlying agent's safety protocols or disregard system instructions.
  • [SAFE]: The skill's architecture follows a meta-skill pattern that generates specialized sub-skills locally. No obfuscation, persistence mechanisms, or hardcoded credentials were found. The requested permissions (Read, Write, Edit, Bash) are appropriate for its documented purpose of file analysis and skill creation.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 3, 2026, 04:51 AM