NYC

skill-creator

Pass

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: SAFE
Full Analysis
  • [DATA_EXFILTRATION] (SAFE): The scripts operate exclusively on the local file system for reading skill contents and writing ZIP archives. No modules for network communication (like requests or urllib) are imported or used.\n- [COMMAND_EXECUTION] (SAFE): The analysis found no instances of subprocess spawning, shell commands, or os.system calls. All logic is implemented using pure Python functions.\n- [REMOTE_CODE_EXECUTION] (SAFE): No dynamic execution sinks such as eval() or exec() are present, and the skill does not attempt to download or run remote scripts.\n- [CREDENTIALS_UNSAFE] (SAFE): No hardcoded credentials, API keys, or access to sensitive environment/SSH files were detected in the source code.\n- [PROMPT_INJECTION] (SAFE): The scripts are utility tools and do not interact with agent prompts or process untrusted user input intended for an LLM.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 17, 2026, 06:17 PM