skill-development
Pass
Audited by Gen Agent Trust Hub on Mar 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill primarily consists of instructional content and best practices for software development. It does not contain any code obfuscation, credential theft, or malicious prompt injection patterns.
- [COMMAND_EXECUTION]: The skill provides examples of benign shell commands for environment setup, such as
mkdirandtouch, to create necessary directory structures. These are standard development operations. - [EXTERNAL_DOWNLOADS]: The documentation references the Claude Code CLI (
cc) and internal utility scripts (init_skill.py,package_skill.py) as part of the intended development environment, but it does not perform any unauthorized network requests or downloads from untrusted sources. - [REMOTE_CODE_EXECUTION]: While the skill mentions the creation and use of Python and Bash scripts, these are presented as modular 'Bundled Resources' to be authored by the user. The skill itself does not execute arbitrary remote code.
Audit Metadata