skill-creator
Pass
Audited by Gen Agent Trust Hub on Apr 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides comprehensive documentation and local shell scripts for skill development and lifecycle management.
- [COMMAND_EXECUTION]: Includes local shell scripts (
init_skill.sh,validate_skill.sh,package_skill.sh) for scaffolding, structural validation, and packaging. These scripts perform standard file system operations (mkdir, cat, zip, find) restricted to the local directory without network access or privileged execution. - [SAFE]: The packaging script (
package_skill.sh) implements a security best practice by maintaining a robust exclusion list for sensitive files, preventing accidental exposure of.envfiles, SSH keys (id_rsa), AWS credentials, and other private metadata.
Audit Metadata