skill-creator
Pass
Audited by Gen Agent Trust Hub on Mar 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The script
scripts/quick_validate.pyusesyaml.safe_load()to parse skill metadata, which is a recommended security practice to prevent arbitrary code execution during deserialization. - [SAFE]: The utility scripts
scripts/package_skill.pyandscripts/quick_validate.pyperform standard local file system operations—such as reading files, creating directories, and generating ZIP archives—that are directly related to the skill's function of managing other skill packages. - [SAFE]: No evidence of prompt injection, data exfiltration, obfuscation, or unauthorized remote network operations was found across the provided files.
- [SAFE]: The instructional content in
SKILL.mdprovides legitimate guidance for skill development without attempting to bypass safety filters or override system constraints.
Audit Metadata