skill-system-creator
Pass
Audited by Gen Agent Trust Hub on Apr 11, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The
creator_tool.pyscript usessubprocess.runto invoke internal validation and utility scripts, such asvalidate_repo_structural.py,mem.py, andgate_validate.py. These calls are legitimate for the skill's purpose as a development and packaging tool. - [COMMAND_EXECUTION]: The
init_skill.pyscript applieschmod 0o755to generated example Python scripts to ensure they are executable by the user. - [DATA_EXPOSURE]: The tool reads repository configuration files such as
skills-index.jsonandSKILL.behavior.yamlto identify gaps in documentation or structure, which is a core function for providing improvement suggestions to the developer.
Audit Metadata