agent-skill-creator
Pass
Audited by Gen Agent Trust Hub on Apr 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill functions as a developer utility. Its scripts (
init_skill.py,package_skill.py,quick_validate.py) perform standard local file system tasks like creating structured directories, writing markdown templates, and archiving files into a .skill package. No malicious behaviors were detected in these operations.\n- [SAFE]: The documentation specifically addresses credential management by advising users to use an external library (credgoo) to fetch secrets from the environment rather than hardcoding them, which is a key security recommendation.\n- [SAFE]: The skill references official documentation and reputable community resources for various AI platforms (Anthropic, Google, etc.), with no evidence of typosquatting or malicious redirection.\n- [SAFE]: The use ofchmod 0o755in the initialization script is restricted to making the newly created template scripts executable, which is expected behavior for a developer tool and does not constitute a privilege escalation risk in this context.
Audit Metadata