skill-creator-yashu
Pass
Audited by Gen Agent Trust Hub on Feb 28, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
RunCommandtool to execute internal Python scripts, specificallyscripts/init_skill.pyandscripts/quick_validate.py, to initialize and verify the structure of new skill directories. - [COMMAND_EXECUTION]: In
scripts/init_skill.py, the code applies executable permissions (chmod 0o755) to generated example scripts. This is a functional requirement for creating executable utility scripts within the new skill's environment. - [SAFE]: The skill operates entirely on the local file system. No network requests, external downloads, or attempts to access sensitive system files (e.g., credentials or SSH keys) were detected. The logic is consistent with the primary purpose of scaffolding and validating developer tools.
Audit Metadata