skill-creator
Pass
Audited by Gen Agent Trust Hub on Nov 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a meta-tool designed for developers to create other skills, providing organizational guidance and automation for project setup.
- [COMMAND_EXECUTION]: The included Python scripts,
init_skill.pyandpackage_skill.py, perform legitimate file system operations such as directory creation, writing template files, and zipping directories for distribution. These actions are consistent with the skill's stated purpose. - [DYNAMIC_EXECUTION]: The
init_skill.pyscript useschmod 0o755to set executable permissions on generated template scripts. This is expected behavior for a tool designed to create functional development environments. - [CREDENTIALS_UNSAFE]: No hardcoded API keys, tokens, or sensitive file access patterns (e.g., targeting .ssh, .aws, or .env files) were found in the scripts or instructions.
- [REMOTE_CODE_EXECUTION]: The skill does not perform any network requests, external downloads, or execution of untrusted remote content.
Audit Metadata