skill-packager

Pass

Audited by Gen Agent Trust Hub on Aug 2, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes standard shell commands (ls, find, zip) to perform its primary function of archiving local directories. These operations are restricted to the local filesystem and are consistent with the skill's intended purpose.
  • [DATA_EXFILTRATION]: The skill reads files from the ~/.claude/skills/ directory to create a package on the local Desktop. It includes explicit safety instructions for the agent to scan for and flag potentially sensitive data, such as credentials, .env files, or personal information, ensuring they are not accidentally bundled into the distributable archive.
  • [SAFE]: No malicious patterns, such as prompt injection, obfuscation, persistence mechanisms, or unauthorized remote downloads, were detected. The external repository link provided in the metadata belongs to the verified author and represents standard project documentation.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 2, 2026, 05:17 AM
Security Audit — agent-trust-hub — skill-packager