skill-creator
Pass
Audited by Gen Agent Trust Hub on Jul 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the Python
subprocessmodule to execute system commands and CLI tools. Specifically: scripts/improve_description.pyandscripts/run_eval.pycall theclaudeCLI to process prompts and test triggering logic.eval-viewer/generate_review.pyuseslsofto manage port availability for its local web server.- These operations are essential for the skill's primary function as a development and benchmarking utility.
- [REMOTE_CODE_EXECUTION]: The skill's core loop involves generating prompts based on performance data and sending them to an external LLM (via the
claudeCLI) to improve code or descriptions. While this involves remote logic processing, it uses the platform's official tools and is the intended primary purpose of the skill. - [DATA_EXPOSURE]: The
eval-viewercomponent starts a local HTTP server (HTTPServer) onlocalhostto provide a GUI for reviewing evaluation results. This server is scoped to the workspace directory and provides a mechanism for the user to review local files and provide feedback, which is standard for developer-centric tools.
Audit Metadata