skill-creator
Pass
Audited by Gen Agent Trust Hub on May 10, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses Python's
subprocessmodule to invoke standard command-line tools such asclaude(for triggering evaluations),gitleaks(for security scanning), andlsof(to manage local server ports). These calls are localized and necessary for the skill's primary function of developing and testing other skills. - [EXTERNAL_DOWNLOADS]: The skill utilizes the
uvtool to manage environment dependencies. It dynamically installs well-known Python packages likePyYAMLand theanthropicSDK from standard registries to ensure validation and optimization scripts have the necessary environment. This is a standard development practice. - [DYNAMIC_EXECUTION]: A local web server is implemented in
eval-viewer/generate_review.pyusing the standardHTTPServerlibrary. This server provides a user interface for qualitative review of test results and manages feedback by writing to a localfeedback.jsonfile. The server is restricted tolocalhostand serves the user's own evaluation data.
Audit Metadata