skill-creator

Warn

Audited by Runlayer on Feb 23, 2026

Risk Level: MEDIUM
Scan Summary
Max Score
78%
Files
7
Flagged
7
Chunks
11
Flagged Files (7)
agents/openai.yamlHIGH
78.3%

Malicious tool definition detected

Tool: agents/openai.yaml Description: interface: display_name: "Skill Creator"

license.txtHIGH
78.3%

Malicious tool definition detected

If You institute patent litigation against any entity (including a cross-claim or counterclaim in a lawsuit) alleging that the Work or a Contribution incorporated within the Work constitutes direct or contributory patent infringement, then any patent licenses granted to You under this License for that Work shall terminate as of the date such litigation is filed.

scripts/generate_openai_yaml.pyHIGH
78.3%

Malicious tool definition detected

Tool: scripts/generate_openai_yaml.py Description: #!/usr/bin/env python3 """ OpenAI YAML Generator - Creates agents/openai.yaml for a skill folder.

scripts/init_skill.pyHIGH
78.3%

Malicious tool definition detected

Tool: scripts/init_skill.py [1/2] Description: #!/usr/bin/env python3 """ Skill Initializer - Creates a new skill from template Usage: init_skill.py <skill-name> --path <path> [--resources scripts,references,assets] [--examples] [--interface key=value] Examples: init_skill.py my-new-skill --path skills/public init_skill.py my-new-skill --path skills/public --resources scripts,references init_skill.py my-api-helper --path skills/private --resources scripts --examples init_skill.py custom-skill --

scripts/quick_validate.pyHIGH
78.3%

Malicious tool definition detected

Tool: scripts/quick_validate.py Description: #!/usr/bin/env python3 """ Quick validation script for skills - minimal version """ import re import sys from pathlib import Path import yaml MAX_SKILL_NAME_LENGTH = 64 def validate_skill(skill_path): """Basic validation of a skill""" skill_path = Path(skill_path) skill_md = skill_path / "SKILL.md" if not skill_md.exists(): return False, "SKILL.md not found" content = skill_md.read_text() if not content.startswith("---"): return False, "No YAML frontm

SKILL.mdHIGH
78.2%

Tool passed security scan

Malicious tool definition detected

Tool: SKILL.md [3/3] Description: Usage: ```bash scripts/init_skill.py <skill-name> --path <output-directory> [--resources scripts,references,assets] [--examples] ``` Examples: ```bash scripts/init_skill.py my-skill --path skills/public scripts/init_skill.py my-skill --path skills/public --resources scripts,references scripts/init_skill.py my-skill --path skills/public --resources scripts --examples ``` The script: - Creates the skill directory at the specified path - Generates a SKILL.md templa

references/openai_yaml.mdLOW
30.8%

Tool passed security scan

Audit Metadata
Max File Score
78%
Classification
UNKNOWN_SERVER
Files Scanned
7
Files Flagged
7
Chunks Analyzed
11
Analyzed
Feb 23, 2026, 01:18 PM
Security Audit — runlayer — skill-creator