skill-creator
Pass
Audited by Gen Agent Trust Hub on Feb 21, 2026
Risk Level: SAFE
Full Analysis
- SAFE (SAFE): The provided Python scripts (
package_skill.pyandquick_validate.py) perform standard local file system operations, such as reading file content and creating ZIP archives. - SAFE (SAFE): In
quick_validate.py, the use ofyaml.safe_load()is a security best practice that prevents arbitrary code execution during YAML parsing by restricting the loader to basic Python objects. - SAFE (SAFE): No network operations, hardcoded credentials, or obfuscated code were found. The script logic is transparent and matches the stated purpose of packaging and validating skill directories.
- SAFE (SAFE): Documentation files (
output-patterns.md,workflows.md) contain static examples and do not include instructions that would bypass agent safety filters or override system prompts.
Audit Metadata