skill-creator
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: LOWCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION] (LOW): The script
package_skill.pyperforms broad file system operations across a directory. - Evidence: It uses
skill_path.rglob('*')to recursively traverse the skill directory and write all discovered files into a zip archive. - Context: This is the intended purpose of the utility (packaging a skill). The risk is low as it operates on the path provided by the user and does not execute the files it finds.
Audit Metadata