skill-creator
Fail
Audited by Gen Agent Trust Hub on Feb 26, 2026
Risk Level: CRITICALCOMMAND_EXECUTION
Full Analysis
- [SAFE]: Comprehensive analysis of the provided files reveals no evidence of malicious patterns, prompt injections, or unauthorized data access. The automated alert regarding 'product.md' is a false positive, as the name appears only as an example filename in a markdown directory tree diagram.
- [COMMAND_EXECUTION]: The utility scripts
init_skill.pyandpackage_skill.pyperform local file system operations, including directory creation and file archival. These operations are implemented using standard Python libraries and are restricted to the local environment. - [PRIVILEGE_ESCALATION]: The
init_skill.pyscript useschmodto set executable permissions on generated template scripts (chmod 755). This is an expected and necessary feature for a project initialization tool and does not constitute a security risk.
Recommendations
- Contains 1 malicious URL(s) - DO NOT USE
Audit Metadata