skill-creator
Pass
Audited by Gen Agent Trust Hub on Mar 5, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides Python scripts (
init_skill.py,package_skill.py,quick_validate.py) designed to be executed locally by the developer or agent to automate the skill development lifecycle. - [SAFE]: The validation logic in
quick_validate.pyusesyaml.safe_load(), which is a security best practice for preventing arbitrary code execution during YAML parsing. - [SAFE]: File system operations (creating directories, writing templates, and zipping files) are restricted to paths specified by the user or relative to the skill directory, consistent with the tool's intended purpose.
- [SAFE]: No network operations, data exfiltration attempts, or obfuscated code patterns were found in any of the scripts or documentation files.
Audit Metadata