skill-creator

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The package_skill.cjs script utilize s child_process.spawnSync to invoke system utilitie s (zip or tar) for creating the final skill package. This executio n is limite d to the packaging workflow and include s path validatio n to preven t traversal.\n- [SAFE]: The skill serve s as a developmen t framework for creating AI agent skill s. It contain s instructional documentatio n and utility script s for scaffolding and validatio n. Analysis of the script s and instruction s reveale d no maliciou s pattern s, obfuscatio n, or unauthorize d data access.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 03:32 PM