agent-skill-creator

Pass

Audited by Gen Agent Trust Hub on Apr 9, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill functions as a developer utility. Its scripts (init_skill.py, package_skill.py, quick_validate.py) perform standard local file system tasks like creating structured directories, writing markdown templates, and archiving files into a .skill package. No malicious behaviors were detected in these operations.\n- [SAFE]: The documentation specifically addresses credential management by advising users to use an external library (credgoo) to fetch secrets from the environment rather than hardcoding them, which is a key security recommendation.\n- [SAFE]: The skill references official documentation and reputable community resources for various AI platforms (Anthropic, Google, etc.), with no evidence of typosquatting or malicious redirection.\n- [SAFE]: The use of chmod 0o755 in the initialization script is restricted to making the newly created template scripts executable, which is expected behavior for a developer tool and does not constitute a privilege escalation risk in this context.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 9, 2026, 11:56 PM