better-skill-creator
Pass
Audited by Gen Agent Trust Hub on Feb 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local Python script (
scaffold.py) to generate skill project files and directory structures. - [COMMAND_EXECUTION]: The scaffolding script uses
os.chmodto set executable permissions on generated shell and Python scripts to ensure they are ready for use. - [COMMAND_EXECUTION]: Generated templates for virtual environments (
main_venv.py.tmpl) include logic to programmatically create Python virtual environments and install dependencies usingsubprocess.run. - [EXTERNAL_DOWNLOADS]: The template for
uv-based skills (main_uv.py.tmpl) provides a reference to the official installation script for theuvpackage manager from a well-known service (astral.sh). - [EXTERNAL_DOWNLOADS]: The documentation suggests installing an auxiliary skill utility using
npx, which refers to a resource provided by the skill's author.
Audit Metadata