Skills
Navigate
skills/composio-community/skills/skill-creator/Gen Agent Trust Hub

skill-creator

Fail

Audited by Gen Agent Trust Hub on Jul 16, 2026

Risk Level: CRITICAL
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes Python utilities (init_skill.py and package_skill.py) intended for local development workflows.
  • These scripts automate file system operations such as directory creation, writing boilerplate markdown, and zipping skill folders into a distributable format.
  • The scripts are transparent, use standard libraries, and operate on local paths provided by the user.
  • [SAFE]: The validation logic implemented in quick_validate.py utilizes the yaml.safe_load() function.
  • This is a security best practice that prevents unsafe deserialization of YAML content when the agent validates skill metadata.
  • [SAFE]: The instructional content in SKILL.md and the associated reference files (workflows.md, output-patterns.md) focuses on architectural efficiency and user-defined workflow logic.
  • No prompt injection, data exfiltration, or obfuscation techniques were identified within the skill body or the provided scripts.
Recommendations
  • CRITICAL: 1 file(s) identified as malware by FileRep - DO NOT USE
Audit Metadata
Risk Level
CRITICAL
Analyzed
Jul 16, 2026, 07:19 PM
Security Audit — agent-trust-hub — skill-creator