skill-creator
Pass
Audited by Gen Agent Trust Hub on Feb 25, 2026
Risk Level: SAFE
Full Analysis
- [DYNAMIC_EXECUTION]: The skill generates local project files and scripts based on user input for skill name and configuration level.
- It renders templates for SKILL.md, Python scripts, and Shell scripts using simple string replacement.
- The generation script (
scaffold.py) applies executable permissions to the resulting script files using standard filesystem operations (os.chmod). - This behavior is restricted to the skill's primary purpose of project scaffolding.
- [EXTERNAL_DOWNLOADS]: The generated templates include a troubleshooting hint that references the official installation script for the 'uv' package manager.
- The reference targets
astral.sh, which is the well-known and trusted domain for the creators of theuvandruffdeveloper tools. - This reference is documented as an installation guide for the user and is not executed automatically by the skill.
Audit Metadata