skill-creator
Pass
Audited by Gen Agent Trust Hub on Mar 5, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes Python scripts (
init_skill.py,package_skill.py, andquick_validate.py) that perform local filesystem operations to automate skill development. These operations are restricted to directory creation, writing template files, and zipping skill folders.\n- [SAFE]: The utility scripts employ secure practices, such as usingyaml.safe_load()inquick_validate.pyto prevent unsafe YAML deserialization during skill validation.\n- [SAFE]: Analysis of the skill instructions and scripts reveals no evidence of malicious behavior, prompt injection, or unauthorized data access. The file system operations are deterministic and intended for local development environments.
Audit Metadata