skill-creator

Pass

Audited by Gen Agent Trust Hub on Feb 28, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes Python scripts (init_skill.py, package_skill.py, and quick_validate.py) that perform legitimate local file system operations, such as creating directories, writing files, and generating zip archives. These actions are consistent with the skill's primary purpose of skill development and packaging.\n- [COMMAND_EXECUTION]: init_skill.py generates new script files from internal templates using string interpolation. The user-provided skill name is validated against a strict kebab-case regex in quick_validate.py, which prevents directory traversal or command injection through the name field.\n- [COMMAND_EXECUTION]: The initialization script applies executable permissions (chmod 755) to a generated template script. This is a standard operation for initializing executable scripts and does not constitute unauthorized privilege escalation.\n- [SAFE]: The skill utilizes yaml.safe_load for parsing configuration files, adheres to strict naming conventions, and does not perform any network operations or access sensitive system paths.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 28, 2026, 08:21 PM