The Agent Skills Directory

[SAFE] (SAFE): The provided scripts (package-skill.ts, validate-skill.ts) are legitimate developer utilities. They perform standard file system operations using the Bun runtime to facilitate skill development workflows. No network activity or unauthorized data access patterns were found.
[Indirect Prompt Injection] (SAFE): The tool processes user-provided skill files but implements sanitization measures.
Ingestion points: scripts/package-skill.ts and scripts/validate-skill.ts read file contents from the local file system.
Boundary markers: Not applicable for a packaging utility.
Capability inventory: File system read and write (Bun.file, Bun.write).
Sanitization: validate-skill.ts enforces length limits and explicitly disallows angle brackets (<, >) in descriptions to prevent potential injection when rendered in a UI.

skill-creator