skill-creator

Fail

Audited by Gen Agent Trust Hub on Feb 26, 2026

Risk Level: CRITICALCOMMAND_EXECUTION
Full Analysis
  • [SAFE]: Comprehensive analysis of the provided files reveals no evidence of malicious patterns, prompt injections, or unauthorized data access. The automated alert regarding 'product.md' is a false positive, as the name appears only as an example filename in a markdown directory tree diagram.
  • [COMMAND_EXECUTION]: The utility scripts init_skill.py and package_skill.py perform local file system operations, including directory creation and file archival. These operations are implemented using standard Python libraries and are restricted to the local environment.
  • [PRIVILEGE_ESCALATION]: The init_skill.py script uses chmod to set executable permissions on generated template scripts (chmod 755). This is an expected and necessary feature for a project initialization tool and does not constitute a security risk.
Recommendations
  • Contains 1 malicious URL(s) - DO NOT USE
Audit Metadata
Risk Level
CRITICAL
Analyzed
Feb 26, 2026, 03:04 AM