skill-creator
Pass
Audited by Gen Agent Trust Hub on Apr 1, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes Python's
subprocessmodule to orchestrate the evaluation workflow. It executes theclaudeCLI for automated testing and optimization, and uses system utilities likelsofandkillto manage the local web server's lifecycle. These actions are transparently documented as part of the tool's core functionality. - [EXTERNAL_DOWNLOADS]: The evaluation viewer (
viewer.html) includes a reference to the SheetJS library hosted oncdn.sheetjs.com. This well-known service is used to render spreadsheet data within the local review interface. - [DYNAMIC_EXECUTION]: To test new or modified skills, the
run_eval.pyscript dynamically generates temporary command files within the.claude/commands/directory. This mechanism allows the agent to interact with the skill-under-test in a realistic environment. - [DATA_EXFILTRATION]: The skill launches a local HTTP server on
localhostto host the evaluation viewer. This server is used exclusively to present gathered metrics and generated outputs to the user for qualitative assessment and does not transmit data to external servers.
Audit Metadata