skill-creator
Pass
Audited by Gen Agent Trust Hub on Apr 1, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill automates testing by programmatically invoking the
claudeCLI via Node.jsspawnin scripts such asrun_eval.mjsandimprove_description.mjs. This is used to test skill triggering and optimize descriptions. - [COMMAND_EXECUTION]: The
eval-viewercomponent starts a local HTTP server to host a visualization dashboard and uses system commands (open,start, orxdg-open) to launch the default web browser. - [SAFE]: The skill follows secure patterns by using standard Node.js built-in modules for file and process management. It operates exclusively on local project data and does not perform unauthorized network requests or data exfiltration.
- [SAFE]: The frontmatter and instructions are focused on development productivity and provide helpful security guidance to users, such as the use of
allowed-toolsto restrict agent capabilities.
Audit Metadata