paperclip-skill-authoring
Pass
Audited by Gen Agent Trust Hub on Jul 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides a Python script to validate skill frontmatter. The script utilizes
yaml.safe_load(), which is a security best practice that prevents the execution of arbitrary code during YAML parsing. - [SAFE]: The instructions include a comprehensive 'Safety Boundaries' section that explicitly requires the agent to seek human approval before performing any sensitive or destructive actions, such as spending, changing external systems, or mutating control-plane data.
- [SAFE]: The skill implements robust 'Stop Conditions' that instruct the agent to cease operations if credentials, permissions, or approvals are missing, or if the request falls outside of the defined safety scope.
- [SAFE]: The 'Authoring Loop' includes a validation step that ensures generated skills comply with the required schema and safety standards before they are finalized.
Audit Metadata