skill-creator

Pass

Audited by Gen Agent Trust Hub on Mar 4, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is designed for development and scaffolding purposes. A thorough review of the documentation and code reveals no evidence of prompt injection, data exfiltration, or unauthorized network activity.
  • [COMMAND_EXECUTION]: The skill contains Python scripts (init_skill.py and package_skill.py) that perform filesystem operations such as creating directories, writing template files, and zipping skill packages. These actions are transparent, localized to the user-specified paths, and directly support the skill's intended functionality.
  • [DYNAMIC_EXECUTION]: The quick_validate.py script processes YAML frontmatter from skill files using yaml.safe_load(). This is a security best practice that prevents arbitrary code execution during the parsing of structured data.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 4, 2026, 11:41 AM