skill-creator

Warn

Audited by Runlayer on Feb 21, 2026

Risk Level: MEDIUM
Scan Summary
Max Score
78%
Files
7
Flagged
7
Chunks
11
Flagged Files (7)
LICENSE.txtHIGH
78.3%

Malicious tool definition detected

Tool: LICENSE.txt [1/2] Description: Apache License Version 2.0, January 2004 http://www.apache.org/licenses/ TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION 1.

Tool: LICENSE.txt [2/2] Description: this License.

SKILL.mdHIGH
78.3%

Malicious tool definition detected

Tool: SKILL.md [1/3] Description: --- name: skill-creator description: Guide for creating effective skills. This skill should be used when users want to create a new skill (or update an existing skill) that extends Codex's capabilities with specialized knowledge, workflows, or tool integrations.

Tool: SKILL.md [2/3] Description: (~100 words) 2. **SKILL.md body** - When skill triggers (<5k words) 3. **Bundled resources** - As needed by Codex (Unlimited because scripts can be executed without reading into context window) #### Progressive Disclosure Patterns Keep SKILL.md body to the essentials and under 500 lines to minimize context bloat.

Tool: SKILL.md [3/3] Description: Usage: ```bash scripts/init_skill.py <skill-name> --path <output-directory> [--resources scripts,references,assets] [--examples] ``` Examples: ```bash scripts/init_skill.py my-skill --path skills/public scripts/init_skill.py my-skill --path skills/public --resources scripts,references scripts/init_skill.py my-skill --path skills/public --resources scripts --examples ``` The script: - Creates the skill directory at the specified path - Generates a SKILL.md templa

agents/openai.yamlHIGH
78.3%

Malicious tool definition detected

Tool: agents/openai.yaml Description: interface:

references/openai_yaml.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/openai_yaml.md Description: # openai.yaml fields (full example + descriptions) `agents/openai.yaml` is an extended, product-specific config intended for the machine/harness to read, not the agent.

scripts/generate_openai_yaml.pyHIGH
78.3%

Malicious tool definition detected

Tool: scripts/generate_openai_yaml.py Description: #!/usr/bin/env python3 """ OpenAI YAML Generator - Creates agents/openai.yaml for a skill folder.

scripts/init_skill.pyHIGH
78.3%

Malicious tool definition detected

Tool: scripts/init_skill.py [1/2] Description: #!/usr/bin/env python3 """ Skill Initializer - Creates a new skill from template Usage: init_skill.py <skill-name> --path <path> [--resources scripts,references,assets] [--examples] [--interface key=value] Examples: init_skill.py my-new-skill --path skills/public init_skill.py my-new-skill --path skills/public --resources scripts,references init_skill.py my-api-helper --path skills/private --resources scripts --examples init_skill.py custom-skill --

Tool: scripts/init_skill.py [2/2] Description: normalized = re.sub(r"[^a-z0-9]+", "-", normalized) normalized = normalized.strip("-") normalized = re.sub(r"-{2,}", "-", normalized) return normalized def title_case_skill_name(skill_name): """Convert hyphenated skill name to Title Case for display.""" return " ".join(word.capitalize() for word in skill_name.split("-")) def parse_resources(raw_resources): if not raw_resources: return [] resources = [item.strip() for item in raw_resources.split(",")

scripts/quick_validate.pyHIGH
78.3%

Malicious tool definition detected

Tool: scripts/quick_validate.py Description: #!/usr/bin/env python3 """ Quick validation script for skills - minimal version """ import re import sys from pathlib import Path import yaml MAX_SKILL_NAME_LENGTH = 64 def validate_skill(skill_path): """Basic validation of a skill""" skill_path = Path(skill_path) skill_md = skill_path / "SKILL.md" if not skill_md.exists(): return False, "SKILL.md not found" content = skill_md.read_text() if not content.startswith("---"): return False, "No YAML frontm

Audit Metadata
Max File Score
78%
Classification
UNKNOWN_SERVER
Files Scanned
7
Files Flagged
7
Chunks Analyzed
11
Analyzed
Feb 21, 2026, 12:33 PM
Security Audit — runlayer — skill-creator