repo-skill-creator
Pass
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
pnpmandgitcommands to automate the creation, validation, and indexing of local files. These operations are restricted to the local filesystem and the current repository context, which is standard for a developer-oriented tool. - [SAFE]: The Python scripts (
generate_openai_yaml.py,init_skill.py, andquick_validate.py) useyaml.safe_load()for parsing configuration files, which prevents unsafe deserialization vulnerabilities. - [SAFE]: File creation logic in
init_skill.pyincludes input normalization for skill names, ensuring that generated paths are restricted to alphanumeric characters and hyphens, mitigating risk of path traversal through filenames.
Audit Metadata