skill-creator

Pass

Audited by Gen Agent Trust Hub on Feb 25, 2026

Risk Level: SAFE
Full Analysis
  • [DYNAMIC_EXECUTION]: The skill generates local project files and scripts based on user input for skill name and configuration level.
  • It renders templates for SKILL.md, Python scripts, and Shell scripts using simple string replacement.
  • The generation script (scaffold.py) applies executable permissions to the resulting script files using standard filesystem operations (os.chmod).
  • This behavior is restricted to the skill's primary purpose of project scaffolding.
  • [EXTERNAL_DOWNLOADS]: The generated templates include a troubleshooting hint that references the official installation script for the 'uv' package manager.
  • The reference targets astral.sh, which is the well-known and trusted domain for the creators of the uv and ruff developer tools.
  • This reference is documented as an installation guide for the user and is not executed automatically by the skill.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 25, 2026, 02:08 AM