skill-creator
Warn
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: MEDIUMPRIVILEGE_ESCALATIONDYNAMIC_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill uses
chmodto grant execution permissions to files generated at runtime. Evidence:scripts/init_skill.pycallsexample_script.chmod(0o755)for the newly createdexample.pyfile. - [DYNAMIC_EXECUTION]: The
scripts/init_skill.pyscript programmatically assembles and writes new Python source files to the file system using internal string templates. Evidence: Thecreate_resource_dirsfunction writes content toscripts/example.py. - [COMMAND_EXECUTION]: The skill instructions in
SKILL.mdprovide specific shell command sequences for the agent to execute, which could be leveraged to perform unintended operations if the parameters were manipulated. Evidence: CLI usage examples forscripts/init_skill.pyandscripts/quick_validate.py.
Audit Metadata