skill-creator

Pass

Audited by Gen Agent Trust Hub on Apr 18, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a development tool for repository maintenance and skill authoring. Its scripts and instructions follow standard software development practices.
  • [COMMAND_EXECUTION]: The included Python scripts (scripts/init_skill.py and scripts/package_skill.py) perform routine file system tasks such as directory creation, file writing, and archiving (ZIP). The use of chmod in init_skill.py is limited to marking the newly created template script as executable, which is expected behavior for its stated purpose.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest user requirements to generate skill definitions. While it processes external input, it lacks dangerous sinks for this data beyond producing text and script files, and it includes instructions for auditing new skills (skill-safety-audit) to mitigate risks from imported content.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 18, 2026, 01:41 AM