skill-creator

Fail

Audited by Gen Agent Trust Hub on Jul 16, 2026

Risk Level: CRITICAL
Full Analysis
  • [SAFE]: The skill provides procedural guidance and templates for skill development, following progressive disclosure principles to manage context window usage efficiently.
  • [COMMAND_EXECUTION]: The included scripts (init_skill.py, package_skill.py, quick_validate.py) are localized utility tools that perform filesystem operations like directory creation and file generation. These actions are consistent with the skill's role as a build tool.
  • [SAFE]: While init_skill.py uses chmod(0o755) to make template scripts executable, this is a standard and expected development operation within the context of generating project boilerplates.
  • [SAFE]: The validator script uses yaml.safe_load() to prevent unsafe deserialization attacks when checking skill metadata.
  • [SAFE]: No evidence of prompt injection, data exfiltration, obfuscation, or remote code execution was found across the skill's components.
Recommendations
  • CRITICAL: 1 file(s) identified as malware by FileRep - DO NOT USE
Audit Metadata
Risk Level
CRITICAL
Analyzed
Jul 16, 2026, 09:14 PM
Security Audit — agent-trust-hub — skill-creator