create-skill

Pass

Audited by Gen Agent Trust Hub on May 24, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses standard system commands such as mkdir for directory creation, ln for symlinking skills into agent configuration paths, and ls for verification. These operations are scoped to the intended task of managing local agent skills.
  • [EXTERNAL_DOWNLOADS]: The skill utilizes npx to execute the skills CLI utility and tsx for running TypeScript scripts. It also describes a workflow for adding skills via npx skills add <owner>/<repo>, which is a standard package management pattern for this ecosystem.
  • [REMOTE_CODE_EXECUTION]: The instructions guide the agent to run locally created TypeScript scripts using the node runtime or npx tsx. This is used to handle deterministic tasks like file generation and validation, which is a recommended practice for modular skill development.
Audit Metadata
Risk Level
SAFE
Analyzed
May 24, 2026, 06:25 AM
Security Audit — agent-trust-hub — create-skill