claude-agents-creator
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a high-quality educational resource and template provider for configuring Claude Code agents. All documentation and examples align with standard agent development practices.
- [COMMAND_EXECUTION]: Several files (e.g.,
debugger.md,test-runner.md) use and document the use of theBashtool. These are used for legitimate development tasks like running tests, checkinggit diff, and reproduction steps, which is appropriate for the skill's stated purpose. - [DYNAMIC_EXECUTION]: The documentation describes
mcpServersandhookswhich can execute code. However, the documentation correctly notes that these require user trust and folder-level authorization, adhering to security best practices. - [DATA_EXPOSURE_AND_EXFILTRATION]: While some examples use
Readtools, they are explicitly restricted to the codebase scope for the purpose of code review or research. No patterns for exfiltrating sensitive data to external domains were found. Thecode-reviewer.mdexample specifically instructs agents to check for and report exposed secrets, enhancing security posture.
Audit Metadata