skill-creator
Pass
Audited by Gen Agent Trust Hub on Feb 16, 2026
Risk Level: LOW
Full Analysis
- SAFE (SAFE): No malicious patterns or security vulnerabilities were detected. The scripts use
yaml.safe_load()for parsing, which is a secure practice to prevent arbitrary code execution during YAML deserialization. - COMMAND_EXECUTION (LOW): The Python scripts
package_skill.pyandquick_validate.pyperform file system operations (reading, writing, and zipping) consistent with their purpose as development tools. These operations are restricted to the local file system and do not involve shell execution of untrusted input.
Audit Metadata