skill-packager
Pass
Audited by Gen Agent Trust Hub on Aug 2, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard shell commands (
ls,find,zip) to perform its primary function of archiving local directories. These operations are restricted to the local filesystem and are consistent with the skill's intended purpose. - [DATA_EXFILTRATION]: The skill reads files from the
~/.claude/skills/directory to create a package on the local Desktop. It includes explicit safety instructions for the agent to scan for and flag potentially sensitive data, such as credentials,.envfiles, or personal information, ensuring they are not accidentally bundled into the distributable archive. - [SAFE]: No malicious patterns, such as prompt injection, obfuscation, persistence mechanisms, or unauthorized remote downloads, were detected. The external repository link provided in the metadata belongs to the verified author and represents standard project documentation.
Audit Metadata