dbs-skill-maker
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes several internal Python and Shell scripts to manage the skill development lifecycle.
scripts/init_skill_project.pyautomates directory and file creation,scripts/validate_skill_project.pyruns static checks for project structure and syntax, andscripts/prepare_github_repo.pyprepares local staging directories for repository publication. - [DYNAMIC_EXECUTION]: The validation logic in
scripts/validate_skill_project.pyuses the Pythoncompile()function to check the syntax of scripts within a project. This is used strictly for static analysis to identify errors without executing the user-supplied code. - [REMOTE_CODE_EXECUTION]: The skill instructions and verification scripts (
scripts/verify_npx_install.sh) involve the use ofnpx skills addto install and test skill packages. The documentation also suggests installing the author's official management tool,dontbesilent2025/dbskill, which is a vendor-provided resource. - [SAFE]: The skill demonstrates strong adherence to security best practices: it enforces a proposal-first workflow requiring explicit user approval for file operations, and its validation scripts include patterns to detect and warn against hardcoded secrets, local absolute paths, and unfinished placeholders within the skills it helps create.
Audit Metadata