skill-creator
Audited by Runlayer on Feb 21, 2026
Malicious tool definition detected
Tool: LICENSE.txt [1/2] Description: Apache License Version 2.0, January 2004 http://www.apache.org/licenses/ TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION 1.
Tool: LICENSE.txt [2/2] Description: this License.
Malicious tool definition detected
Tool: SKILL.md [1/3] Description: --- name: skill-creator description: Guide for creating effective skills. This skill should be used when users want to create a new skill (or update an existing skill) that extends Codex's capabilities with specialized knowledge, workflows, or tool integrations.
Tool: SKILL.md [2/3] Description: (~100 words) 2. **SKILL.md body** - When skill triggers (<5k words) 3. **Bundled resources** - As needed by Codex (Unlimited because scripts can be executed without reading into context window) #### Progressive Disclosure Patterns Keep SKILL.md body to the essentials and under 500 lines to minimize context bloat.
Tool: SKILL.md [3/3] Description: Usage: ```bash scripts/init_skill.py <skill-name> --path <output-directory> [--resources scripts,references,assets] [--examples] ``` Examples: ```bash scripts/init_skill.py my-skill --path skills/public scripts/init_skill.py my-skill --path skills/public --resources scripts,references scripts/init_skill.py my-skill --path skills/public --resources scripts --examples ``` The script: - Creates the skill directory at the specified path - Generates a SKILL.md templa
Malicious tool definition detected
Tool: agents/openai.yaml Description: interface:
Malicious tool definition detected
Tool: references/openai_yaml.md Description: # openai.yaml fields (full example + descriptions) `agents/openai.yaml` is an extended, product-specific config intended for the machine/harness to read, not the agent.
Malicious tool definition detected
Tool: scripts/generate_openai_yaml.py Description: #!/usr/bin/env python3 """ OpenAI YAML Generator - Creates agents/openai.yaml for a skill folder.
Malicious tool definition detected
Tool: scripts/init_skill.py [1/2] Description: #!/usr/bin/env python3 """ Skill Initializer - Creates a new skill from template Usage: init_skill.py <skill-name> --path <path> [--resources scripts,references,assets] [--examples] [--interface key=value] Examples: init_skill.py my-new-skill --path skills/public init_skill.py my-new-skill --path skills/public --resources scripts,references init_skill.py my-api-helper --path skills/private --resources scripts --examples init_skill.py custom-skill --
Tool: scripts/init_skill.py [2/2] Description: normalized = re.sub(r"[^a-z0-9]+", "-", normalized) normalized = normalized.strip("-") normalized = re.sub(r"-{2,}", "-", normalized) return normalized def title_case_skill_name(skill_name): """Convert hyphenated skill name to Title Case for display.""" return " ".join(word.capitalize() for word in skill_name.split("-")) def parse_resources(raw_resources): if not raw_resources: return [] resources = [item.strip() for item in raw_resources.split(",")
Malicious tool definition detected
Tool: scripts/quick_validate.py Description: #!/usr/bin/env python3 """ Quick validation script for skills - minimal version """ import re import sys from pathlib import Path import yaml MAX_SKILL_NAME_LENGTH = 64 def validate_skill(skill_path): """Basic validation of a skill""" skill_path = Path(skill_path) skill_md = skill_path / "SKILL.md" if not skill_md.exists(): return False, "SKILL.md not found" content = skill_md.read_text() if not content.startswith("---"): return False, "No YAML frontm