skill-creator
Fail
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: CRITICAL
Full Analysis
- [SAFE]: The skill provides procedural guidance and templates for skill development, following progressive disclosure principles to manage context window usage efficiently.
- [COMMAND_EXECUTION]: The included scripts (
init_skill.py,package_skill.py,quick_validate.py) are localized utility tools that perform filesystem operations like directory creation and file generation. These actions are consistent with the skill's role as a build tool. - [SAFE]: While
init_skill.pyuseschmod(0o755)to make template scripts executable, this is a standard and expected development operation within the context of generating project boilerplates. - [SAFE]: The validator script uses
yaml.safe_load()to prevent unsafe deserialization attacks when checking skill metadata. - [SAFE]: No evidence of prompt injection, data exfiltration, obfuscation, or remote code execution was found across the skill's components.
Recommendations
- CRITICAL: 1 file(s) identified as malware by FileRep - DO NOT USE
Audit Metadata