claude-agents-creator

Pass

Audited by Gen Agent Trust Hub on Oct 11, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a high-quality educational resource and template provider for configuring Claude Code agents. All documentation and examples align with standard agent development practices.
  • [COMMAND_EXECUTION]: Several files (e.g., debugger.md, test-runner.md) use and document the use of the Bash tool. These are used for legitimate development tasks like running tests, checking git diff, and reproduction steps, which is appropriate for the skill's stated purpose.
  • [DYNAMIC_EXECUTION]: The documentation describes mcpServers and hooks which can execute code. However, the documentation correctly notes that these require user trust and folder-level authorization, adhering to security best practices.
  • [DATA_EXPOSURE_AND_EXFILTRATION]: While some examples use Read tools, they are explicitly restricted to the codebase scope for the purpose of code review or research. No patterns for exfiltrating sensitive data to external domains were found. The code-reviewer.md example specifically instructs agents to check for and report exposed secrets, enhancing security posture.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 11, 2026, 06:56 PM