skill-generator
Pass
Audited by Gen Agent Trust Hub on Apr 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements standard file system operations such as directory creation, template generation, and ZIP packaging, which are entirely consistent with its documented purpose as a developer utility.
- [SAFE]: Secure coding practices are followed in the validation logic; the script uses
yaml.safe_load()to process configuration files, mitigating risks associated with unsafe deserialization. - [SAFE]: The documentation includes proactive security guidance, explicitly instructing users to avoid hardcoding API keys or tokens and recommending the use of Model Context Protocol (MCP) for secret management.
- [SAFE]: No unauthorized network operations, remote code downloads, or privilege escalation patterns were detected. The scripts rely on standard Python libraries and local execution.
Audit Metadata