skill-creator

Pass

Audited by Gen Agent Trust Hub on Mar 18, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The script scripts/quick_validate.py uses yaml.safe_load() to parse skill metadata, which is a recommended security practice to prevent arbitrary code execution during deserialization.
  • [SAFE]: The utility scripts scripts/package_skill.py and scripts/quick_validate.py perform standard local file system operations—such as reading files, creating directories, and generating ZIP archives—that are directly related to the skill's function of managing other skill packages.
  • [SAFE]: No evidence of prompt injection, data exfiltration, obfuscation, or unauthorized remote network operations was found across the provided files.
  • [SAFE]: The instructional content in SKILL.md provides legitimate guidance for skill development without attempting to bypass safety filters or override system constraints.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 18, 2026, 08:51 PM